last executing test programs: 3.608484746s ago: executing program 2 (id=8162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x8, 0x3, 0x3) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004340)=@deltfilter={0x389c, 0x2d, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x0, 0x9}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1800}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1000}, @TCA_FLOW_MASK={0x8, 0x6, 0x80}]}}, @filter_kind_options=@f_route={{0xa}, {0x3844, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x3}, @TCA_ROUTE4_TO={0x8, 0x2, 0x23}, @TCA_ROUTE4_ACT={0x14f0, 0x6, [@m_connmark={0x124, 0x6, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x8, 0x8, 0xfffffffd}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfde, 0x5, 0x1, 0x100000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb69, 0x0, 0x7, 0x8, 0x101}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x4, 0x82d5, 0x8001}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6888d026, 0x2, 0xffffffffffffffff, 0x0, 0x2}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x52f4, 0x4, 0x8, 0x1}, 0x79a4}}]}, {0x4a, 0x6, "6673663fb58be65b7b8541e26c5c29605b7f89aa38739909aa0bdea8c9fd1f5a9912f4467c7f368af65bb6e8ad879745aefa70a31e1c6317188bcda81099517923b7d8631a91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x1148, 0xb, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x493f1edd, 0x3, 0x6, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x524, 0x4, 0x9, 0x3, 0x9}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x10000000, 0x9, 0xa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x30, 0x5, 0x8, 0x7}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80, 0x20000000, 0xbb2, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x5, 0x0, 0x3, 0xe}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1fe3, 0x10000007, 0x3, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6f79, 0x4, 0x8, 0x0, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x380, 0x6, 0x5, 0x6, 0x4}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x5, 0x6, 0x1000}, 0xfff8}}]}, {0xffe, 0x6, "0c7f2fbbacecddccaf3d9e8dee29ff77b12e0a53dda2bf6f056af86690a11af47be9c1408c3f7b405efc21c35425fecb814e0f4297ed6f18af49c8b95e75c36893b5bb308c75a0df60aaf9bbcafa764e59b86255830ebfdd3e390c198186ada3a9c41a66931772bcb27bc54ab6f50580c6bd897c61b556428d759085e6773679c199459d32f312d05cd371764b92dabebcd041da6c06f55531b52896037a7d5b9c4bdf00c351cd6f85eeef5cd4e6a502427a635ec23faba2ee6eaecd8d72fbe2d47f3d72e2928154b40862ee0338a70fdc448a3a455f31d3aa942518ecbd474f86b6d6a10f14f19b7348fe3e6ab49a7e1b3182bdc9bcc15a02c6dc0ff92b1076b13ddaf28f9c4d1a5b9f6dbe269a9d9cee7518178b3f3005193e88f1f67d010fd4359180d0e56c4ac88ad74471aba50f0f8951de96e3d83d60589312d5f791e861240caec292bd84001c4d90f22a366147403d718db07c0b0d02af030130443ef8e05d3af6f30724508552601b4501e9a867cf420fb53496ad734a84e4ba0d0713016fce6aed55e45e1d4b3ce6a3339e6d4c9654c9ab14073e3042f067580826c4e8f2f51ac09af6eeb12d0438c77b7879e2845d608abecbb5991aee059ec4b50427966aba942802170f3d0d78398b848f1f380dcdd98a3a332a3a152342d78673c312366705110cc2f3cb90b84118f433ac8bcb065b1995f296dfba88eb06c90691291f6e40f1cfec0f69165a3f8ff00e76c0710d0eb62e8a1c6e7cfa54c1fb84d154b96c4dbff03634c34098d32ba940fe498ca4c9e5ab4e6ff696685dde224e4dd1aa63eba46d72f5543e955c33a6fd891729ece1713ae3ac94cf22272a43e077fce95e6a7d2c48ab8f9d2d00a7f66d02343bddb6630d8e49ece302363a7cd36aa75c818bf59293cf369ea9e3858e56224307bbd906052d27d6aab2a90bc754287c23c9698a74b137eb0cebdda662de273e7504d99ed82ffbcaae8ae56b243c94491875d24770467be3d1e40b1f8b728da3f71f11d6b577a8952484aeb34c1dd5bd6b00dfaae70da4a085a7fe009456b49e7e3c5c5b42c2ea89cf0b359cb44013ac4e1dd4cb9f83e2f2b4a02eee48446aefec5e19e2e03e9bdcf6885622636f4ce9a2038f626b36ed0b72b4a1649d400e0b99189d2069855b4daffde022b16016a059a0966559f44cad614b02dbf953d10b9a662546a7344f054e6aa5d3e5e3d87ca7c539fbcdd9516aba6abfc418b8f88e87298e70966ad09c861a2e107b2bff82042049002b98658d5e8ea746490624493e3f5ac856eb26e10c953acbe7b262d0069a785e06217bb7c9d5e80a5308919909d346759777613bec3d301b9f433c6135690bfeef5e825be5f48bcf148b0cd659cda969f4e391ffc88bf112328ce25c0de575f535d2c2e47bc8b84d2098b42a861614e6e817509508ddb024c57d49aab83fd6524af3efeec19786ae1697c4700cd9db9f80389dd1f85365e4f26fdad4a980861cf9f07ca8553013dbb283a859b77c8ec9969570032eb48c28d7605345729f29a9e25c50ec05f015d5565eebe2a7b5b92b58f0d406364d51cbe28a7cf079da58f533b69d65608ef995e15ca34a8ab57c6786ea47cd650f2bbb48e90cb1fbd5e87fa6cb2d10345945d8507a758b26cd06f54e9b8ffcf5bc6cc99497d7ceac2ae4c73b4c40647768c9e1c971ca8bbde80bb342b3b54ad9f1ff2beaca047bf7745072bd4207fe69ede42689a177783eebcd198c384a655e1c2e08a27e336857e4c33cfcc41a2fa9ab11806954d0e918e7eb7a225ca96d9625d37fa24815d7f4f0a0899820025d81e5841303ecbbbfae92ddaf8245be9e79a702abeaaae1dde5df214ce6fc1b6eb50372f0568013d2f3ba573b93a185a12d04e460f88740135a962675d73b36f6aa2cb5207f8cfed181cffa6c6ccce520f73b8dca15690a3aff7b8059ae3ae288a7653b9a0f4c7a694f93bd3833ce9394eeb7b15c052e46464e1918e79d74f5b9820773c9fc57f4a6ca98f552040218dc0d157cf738671ace2bbc3360e99a48f047f797661d66a27135d2708bfb8b528ecf1c3bafc5a2ed7151f6e3d98c931d70b499b517e4e3588ba486e4e6dd8dde8d1997fd605288237b9888ecf8b1f2c5a9f40562780ec7c772a8b1ad192722a626c5e477f933cc25d6839145f29c9e1372427e30268834e21faa3a653700f95cef9ab2012356404ef128ba90cc0d05a0a49304771637f7803aab8e49163078fce4faa616a47d38dd21b768b08c0e56860169e55204f9adb2c7296f7d0f8d27d13ed35b517a9dc836b710582244605bbba7b77de9a361dada1714db1b01914b0bdbdc0c492e09ea2023e9d5afb729b076e9c5029263e0ad88fdc3dce3ae7d0e77246e0e2f4a2a4f9c6745f342d8ae55ee1dcd23ead2552449c183e5e88b50bda17f3d99c37af19a571c4c8ec7a34199f0b31dc8b21d0b69ec7827ce5d6ac3d461837fe055fd01f19453608d058bb20a9d13e75e6f4ddac7134a499f7e3b9441eebb6560cff70fe596749c8c79e96667871d8f8ec5416afd58e2be8f4487a551e8ed6341aa1af08cafda93fbad227a07f8c5dc7ed88ac5cdb88ddcf5d31d04586afec0c10d1a946b60d81f6ecb46da4aa7a58f0c2780f94d22f508a3e3d3e8b7c31c263c65f44d0e84a6b8caf9152f90845223586e54675987e449ed08a4891efa344fb929d44d42b7bff7352702fdadbac1df4efda0af1dbd14de40114359ae51a4eda9628beb21c1e293ea52bbe9b3052251232faed629211d364060aea59475e5595aeeff3c605f493d043e96c6334648e47933d3c76b03a6af0ac7fb72d52ddf6ace25b74b52b03a913fb6fbdeb98de38af2a95255f6985eec56df0a8dcae7ab286356a8b5f4953e077cff67d5dc3136b2fdc7ec5db157cc460d177574b9f65739cb3d8be3586fa9d8a269d01bc3c29d8619588ffe4917546178e28ab05895115cdade2a12e9485116c8ee850fc9025e0422391be25cdd088acd88f26980716d8907055a4c1e23a6864e957f71fc29059b5663ed28302d2fe01d01fa0f8b801e04257cc495b54ab09edaba15a92ac28d39c7cf60cbce7d624e414b587af991b467f6f37ad98c3e757d8ecd1f99dfafba8a3fae5c389de8eb5210f9e0e3baf2d97da29dcc760ce032765884c00a603c2c6342fe4fd9167874245805d0e2d20e22542da73dbee78fed7c5fc1f0ace9bef2e1fd310565d34f741775ee340a56ddfbf2b93dd3a1f15dde522f2f8e607ce7b4cf1236accdfeb61923ef084f25775b6fd07678b986b4cea45b0eb1590e656c131fece949f4d0d09778360c2da47c46417ddc175a80929c78e2670394954d6c7d6fcc27b9f2253392f0940382c6fe8567bfd319480178d17a9504b6ee5af19d01fb4f487058a400e236cad63bd159e98d474671537ad80ac12a8e407c0207505c9dddaf41924d4327a672f7be6e1429834e46e164cc2ca79dd0198726a2229f21c08f76ecc7fb8147186062b6d65dfbd5f7f033fb6abc43a0b54b262970680d1631ecf70526fef12a207efd0ddf04958ce68d174b9290d670a94c5a037d9c93ee7151cd565a7bfc6e2d8da21a9ffd8dac9c44881d2627b6e35e6a31d8e80f782e1f216813fcc30f941eb2ded422d562410fbd12730d2c48f31e6286ce836cbf40e804493f24895b7dae220a232f3b44d7e144a4349ba40a62d72f31ebe63260d034262e6c5018f189cfc171915e7df995e0c675ddad88643b0ff0fcd95ff835386587c077fa58451887ad792ba85048d7cc39da2cc8c84ed9849f9bf1fe93f770a6a0d56f9c922c6b390c19f1d59718ad367c08c22adb9e59f094f7078870732da68862c3c1a935326a590cf1a6148f2828c6e9c30beba10796aee0d3b20062972c5add5c2b98ec24beb74535b4f187123badb18cbb71ae9005da94a738a292ce53b6ede31a0ff324b1f5a4d5fd0f51fbe465cca6e299f079fdfbad3bf94eb817eb4aa1c1ba0f1208f4584a1493dae8f6d1bdeedf20ddf586eca273e8355f02c5830d0deb8985a06d4c233269a0918f136e90420827b476d7dd6f13b60ced2e26d4134a0a08eb1822d7c5633c42c42e528a71fad05dadf643b8ff50d10d4632c8a8177242dc64a1882b173f2150bb6706aedd40462cc8fca02739078790146467c3b583cffc995fc70f91cc3f6e45d5744dbdfa5502390a0fd33ca1ae3e411488795e35fae85e6d8feef417be050dd83301bfd1633c9224ca36214866e243158b78713641680ccdd8d26ceab22c9c8ea9dd9dae5834365a16b2ff33473d054d24f0ebee43dafe985403fc9803bb6125e114341aba0fc2adc43e381b47f79c30128a5b5294a264e109da5fb18498f524af071f460b7efdb0c8541a81bb7ca0f01ae2c8c214dd12071504eab053edcaebe9529a599f7c5ff54abaa727b006348000653be69d832322a4647f89b2b3999acb6b5d307131bece778c099d4b4cbaf34d74f284f6936d4114f697d373a76f874186ba8a7f6e2458bfeab2e5c28d10fc4f0af81c65d08746aac2315c36c3d5eb46ac68ea1f7306fb36f6417db271ce16099b7b294a6ef3c3dad044cdff2b38d7f54eef3ce3824c997c7feacd77b63b453dbac137ccbc81abac77af4cf0b72b1be2c5539dff09b7e552776d5ee945240d3449b30c4bea61a29323cbf008df55b284a1f8ad191e795888e9fb0421742f8fcb6977f8dc6344f4171d4a2ac25c86c559d9741e5d7f446b77b8ba326484fb8c5109e57c71a46a226e7f9a5036ac04b32cc893557d858ca20df09991e8f67f993f9f407e74af7084a63f5f7c25bf572f646631e2c936749c20a011ba83016cb186150c1feb8044c7c2d0d71d312634b1c40a62d1a5d489f32eb76a8009d2aa340b4f93a614050f91a4e31d1b86541c246ae04c004319475e231ad6e76924f2fcc059f772f20a8c28d3fc5a7ebf77a021a07a964c87f865377cd92116db465e017f0dc131184724d5c494bf0c1e321e41f41bfb086394b922d2e57e37dd041b93df9748229998697ef5e343accd2e1b995af244090e85f57075d0c47a2f4af4dd2ce3d6f296778c08467c01b9092e4c62918b3bda356e880f2a3865b10c0672113eca10b587694d1c3de4a26c5f0112a56aeeb83db0a8ff81d46db3e18d3cfa28a318b6d72f7b1ee1a509889d4c4a1c61ae74b9fa8d365c34c2df5ba674c2f06abac0b8c6852d177e777f51955378251bb8a55c189de9300c1bdd52939ad1164f938dcc76aeb7dc9ff81867be6dd4be9387a6a8332373fa594c4c0bcd21bad51d89a6c6e984663cecc3a2a4889b03bebd671e8a68a3b1d904b5dc9aa5ca7a6aed9592ff8de0f439792d13ad94be4ace9f873a97419f3ca0e3c0767982992e2f6e4bec3760d8ebdb64e50342b5fab3f0613f47816796a0949f753760f61e9c442435d61c8e770248cf41ba9ec4a66721ea2c1b1fb975e2100988314a787045748a1d52c30796b61a3487da855568372154d791670fbf3e4f9f93aa428bb2830e47ef1dfb0327114a92a4a05ebcc1e3ef7fca9bc5d0f5a9d4a6caa00eaa117cdae8ca256c955ed22a74510c091d03fb874a432edf1646c9998f3632b1b51a4f0576259e22cdbd080b9f8cb52e88409e85431727e24afc3b59e98f91a950b4ed6efd32c8241de294f7a199abc9308d79ea3a83bb889020f8035c8cd55d278907b444d3743d76e9e7789cd48dfacbcbff2b2ef7f863a46169e768319893b766687fd9ef1ae1ac46afce45c7dd9200d7b65299"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x58, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "ab8e8668a5185a279b4fd8ec1a051163"}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0x9, 0x6, "b5c01c63a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x118, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '^%\xff\x00'}]}, {0xe1, 0x6, "6bb1a0af236dea2f8cda5f1af3947a2620949de24ebfbcc46f125c3d08e0819956018b24fb077f984d051f41081a91d2abb3baacd4dc3f158270e1b60c0ea1224387af97aa18cf469f5c254b277e4335757f9ad7ab53779e580398c05667d857f68fc4d9a4f0dc8f2eec74a17d784c17c9d797dafcd254dd78331277b3bef05cbb0b174ae60a476d8749a03cc8317ce4cd75abfef2514056c19e0cd1ecc27a022ec1f5289fed37835a033e588b394c6d44ca5d4ce8fcbe370d96581e1b682f320c264e45c9e4577c63a3a4cf337981b6645195c575e38e61e103e4c04f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x110, 0xc, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x749, 0x9, 0x7ff, {0x56, 0x2, 0x7, 0xe, 0xfffe, 0x9}, {0x4, 0x1, 0x8, 0x100, 0x2, 0x7}, 0x3, 0x6, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x3, 0x7ff, 0xe495, {0xff, 0x1, 0x1, 0x747e, 0x5, 0x3}, {0x9, 0x1, 0x8bfb, 0x2, 0x2, 0x2}, 0x4, 0x1, 0x2}}]]}, {0x4d, 0x6, "9f4bb3f5178c26e7df73066c4bc6bfe164749cfb4a8134e5b1d58569b519b0a12185db3d16931a9256096f61d264971898f6b7104ae0941ad562dae160ef774fb0ea7db2d1c7ad18e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x74}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf5}, @TCA_ROUTE4_ACT={0x2330, 0x6, [@m_police={0x21bc, 0xd, 0x0, 0x0, {{0xb}, {0x2184, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x1, 0x100, 0xf83d, 0x6, 0x8001, 0x4, 0x4, 0xfffffff7, 0x0, 0x0, 0x9, 0x1, 0x5, 0xb3, 0x200, 0x4, 0x400, 0x5, 0xf2e, 0xfff, 0x9, 0x4, 0x0, 0x1, 0xbbe, 0x0, 0x36e40b93, 0x6, 0x200000, 0x7f, 0x3, 0xf, 0x9, 0x8, 0x1, 0xdad, 0x3, 0x7, 0x7f, 0x7, 0xffffffff, 0x6, 0x3, 0x5, 0x7, 0x3, 0x0, 0x0, 0x3, 0xfffeffff, 0x6, 0x80000001, 0xfff, 0x5, 0x6, 0x3, 0x82, 0x4, 0x6, 0x9, 0x480, 0xfffffe00, 0x5, 0xd, 0xfff, 0x7a20, 0x8, 0x2, 0xc8b, 0x38, 0x38, 0x9, 0x7, 0x4, 0x9, 0xff, 0x6, 0x0, 0xfffffffb, 0x800, 0x6975, 0xfff, 0x7, 0x6, 0x8, 0x4, 0xffffffbf, 0x9, 0x40, 0x7, 0x799, 0x28b, 0x1, 0x21c91d3e, 0x3, 0xfffff801, 0xe4, 0x200000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x6, 0x9, 0xf, 0xb, 0x6, 0x8, 0xfffff801, 0xfffffffe, 0x8, 0x2, 0x400, 0x100, 0xbf2f, 0x4, 0x4, 0xd, 0x7, 0xbc, 0x8, 0x9, 0x0, 0x4, 0x8, 0x9, 0xf85, 0x7fff, 0x5, 0x6, 0xfffffffb, 0x1, 0x40, 0x8, 0xfffffff9, 0x400, 0x6, 0x2, 0x5, 0x1, 0xc62c, 0x336c, 0xba9, 0xfd55, 0x2, 0x7, 0x3, 0x8, 0xe00, 0x26, 0x95ba, 0x5, 0x2, 0xeed, 0x9, 0x4, 0x12c, 0xf, 0x2, 0x7, 0x4, 0x2, 0x2, 0x2, 0x80, 0x8, 0xffff2232, 0x8, 0x6, 0x1, 0x3, 0x7, 0x2, 0x7, 0x3, 0x7, 0x3, 0x4, 0xa, 0x74, 0x10000, 0x7fffffff, 0x0, 0x7, 0x80000000, 0x100000, 0x80000001, 0x6, 0x800000, 0x6e, 0x3, 0x1, 0x8000, 0xde01, 0x6, 0x10001, 0x7, 0x7, 0x3, 0x101, 0x8, 0x7, 0x6, 0xe, 0x2, 0xdbc, 0x8, 0x4c6, 0x5, 0xffffff26, 0x6, 0x5, 0xbd2, 0x5, 0xfffffe00, 0x6, 0x4, 0x5, 0xfff, 0x7, 0x10001, 0x9, 0x400, 0x7, 0x2, 0x4, 0x7, 0x10, 0x6, 0x5, 0x66, 0x7f, 0xfffffffa, 0x7, 0x7fff, 0x5b0, 0x4, 0x9, 0x1, 0x13, 0xffff, 0x5, 0x56, 0x0, 0x3, 0x1000, 0x7b700000, 0x9, 0x1, 0x7f, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x1, 0xffffffff, 0x4, 0xa, 0x7, 0x3, 0xffffffff, 0x6, 0xfffffffe, 0x401, 0x100, 0x6, 0x8, 0xc0000000, 0x200, 0x9, 0x5, 0xd, 0xfffffffd, 0x4, 0x800, 0x5, 0x77c, 0x1, 0x3, 0x80000000, 0x2, 0xe, 0x4, 0x1ff, 0x400, 0x7fff, 0x5, 0xece0, 0x2, 0x9, 0x499957ae, 0x0, 0x43, 0x2, 0x5, 0x7, 0x5, 0x100, 0x4, 0xbef1, 0x3, 0x1ff, 0x9, 0x5, 0x2, 0x2, 0x2, 0x2, 0x0, 0x7, 0x10, 0x80, 0x1, 0x6, 0x5, 0x5, 0x6, 0x94b, 0x4, 0x2, 0x0, 0xffff, 0x703e, 0x8, 0x7, 0x9, 0x8, 0x400, 0x33f, 0x2, 0x7f, 0x6, 0x1, 0x2, 0x895, 0x7fffffff, 0x9, 0x6, 0x2, 0x2000000, 0xc96, 0x400, 0x7, 0x1, 0x3, 0xe, 0x7, 0x4, 0x0, 0x3, 0x7, 0x8001, 0x3d, 0x6, 0x4, 0xde26, 0x0, 0x1, 0x7, 0xfff, 0xe3, 0xc6, 0x6, 0x5, 0x0, 0x4, 0x5e, 0x1, 0xc61c, 0xa8ed, 0x5, 0xaf, 0x7, 0x8, 0xfffffe01, 0x40, 0x10000, 0x157f, 0x0, 0x7, 0xf, 0x0, 0x0, 0x0, 0x200, 0x6, 0xdfa997df, 0x100d, 0xfff, 0x9, 0x6a4859da, 0x5, 0x2, 0x6, 0x1, 0x6, 0x6, 0x80000001, 0x8, 0x4, 0x7fff, 0x401, 0xfffffffb, 0x5, 0x4, 0x4bf9, 0x3, 0x777, 0x3, 0xffff90ef, 0x5c, 0x3, 0x0, 0x1, 0x4, 0xffff7fff, 0x14000000, 0x7ff, 0x7a3, 0xffffffff, 0x0, 0x80, 0x3, 0x5, 0x4, 0x4, 0xd, 0x80, 0x1, 0x7, 0x7, 0x2, 0xb6d, 0x0, 0x9, 0xffffffff, 0x1, 0x0, 0x2, 0x5, 0x7ff, 0xb, 0x1ff, 0x6, 0x5, 0x0, 0x8, 0x5c6, 0x0, 0x9, 0x80, 0x5, 0xc000, 0x4, 0xff, 0x8, 0x1, 0x9, 0x8000, 0x5, 0x0, 0xc29, 0x4, 0x3, 0x7, 0x200, 0x4, 0x2, 0x6, 0x180, 0x8, 0x100, 0x80000000, 0x3ff, 0x4, 0x40, 0x2, 0x2, 0x3, 0x8, 0x3, 0x7, 0x3, 0x8, 0xfffffffc, 0x80, 0x8000, 0x4, 0x8, 0x46b, 0x0, 0x2, 0x6f9, 0x7, 0xd, 0x4, 0x3, 0x0, 0x8000, 0x1, 0x9, 0xfffffffb, 0x80000000, 0x3, 0x4, 0x3bbe, 0x5, 0xb, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x36, 0x3, 0x3dd4, 0x101, 0xa, 0x9, 0x8d1, 0x4108, 0xffff, 0x3721, 0x2, 0x1, 0xffffffff, 0x550, 0x5098, 0x200, 0x2, 0x8, 0x6, 0x3755, 0xa10, 0x8001, 0xa, 0x1, 0x5, 0x9, 0x5, 0x5, 0x204, 0x5, 0x6, 0x58954f82, 0x7, 0x10000, 0x9, 0x3, 0xeaa0, 0x10001, 0x6, 0x1, 0x247329e6, 0x7fff, 0x80000000, 0x7, 0xdc7c, 0x813, 0x97, 0x76, 0x7, 0xfff, 0x100000, 0x7fff, 0x5, 0x4, 0x5, 0x7, 0x6, 0x1, 0x2, 0x0, 0xb13, 0x8, 0x80000001, 0x4, 0xfff, 0xf5, 0x6, 0x800, 0x81, 0x8, 0x4, 0x3ff, 0x80000000, 0x3, 0x2, 0x7, 0x6, 0xe, 0x1d8b, 0x3, 0xc, 0x5, 0x4, 0x2, 0xfff, 0xffffffff, 0x0, 0x8000, 0x10001, 0x4, 0x3, 0x3ee1, 0x200, 0xb, 0x6, 0x2, 0x7f, 0x80000000, 0x5, 0x8, 0x247, 0x4, 0x4, 0xfffffffe, 0x80000000, 0x1, 0x1, 0x5, 0x3, 0x0, 0x5, 0x1, 0x20f, 0x9, 0x8, 0x4, 0x7, 0x1, 0x5, 0x7, 0x72, 0x36c6, 0x401, 0x5, 0xffffffff, 0x14, 0x4, 0x8, 0xffffffff, 0x401, 0x81, 0x191, 0x5, 0x4, 0x4, 0x81, 0xea9, 0xa01, 0xc, 0x9, 0x4, 0xc44, 0x9, 0x9, 0x2, 0x6, 0x7fff, 0xc, 0x9, 0x1, 0x7, 0x3, 0x7, 0x64a5, 0x8, 0xffffcce2, 0x3, 0xd2da, 0x6, 0x5e, 0x0, 0x1, 0x3, 0x4, 0x5, 0x4, 0x9b, 0x7fffffff, 0x6ce, 0xffffffff, 0x1, 0x3, 0x40, 0x61e9, 0xf5a, 0x3, 0x2, 0xf69, 0x80, 0x8000, 0x4ae8, 0x0, 0x8, 0x4, 0x80000001, 0x3, 0x4, 0x800, 0x4b5, 0x984, 0x4, 0x1, 0x2, 0x7, 0x10001, 0x4, 0x5, 0x1, 0x3, 0xfffffffb, 0xc33, 0x3400, 0x9, 0x5, 0x10000, 0xa, 0x12, 0x6, 0x8, 0x101, 0x7, 0x1, 0x3d6, 0x29b, 0x8, 0x1, 0x57, 0x2000000, 0x9, 0x3, 0x6, 0x3, 0x7fffffff, 0xfff, 0x3c, 0x8, 0x0, 0x9, 0x781d, 0x6, 0x3, 0x10000, 0x8, 0x1, 0x7fff, 0x401, 0x8001, 0x4, 0x9, 0x5, 0x1f, 0x7fffffff, 0x80, 0x7fffffff, 0x800, 0x3ff, 0x6, 0x800, 0x9, 0x4, 0x4e1, 0xd, 0x80000000, 0x3]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3d34}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x8, 0x101, 0x68, 0x1ff, 0x7, 0x7, 0x1, 0x7, 0x1, 0x3, 0x74, 0x3, 0x8d6, 0x7a, 0x9, 0x6, 0x4, 0x3, 0x10, 0x4, 0x5, 0x8, 0x1, 0x7, 0x4, 0x2, 0x9, 0x8, 0x6, 0x9, 0x8, 0x4, 0xffffffff, 0x80, 0x9, 0x0, 0x3ff, 0x4, 0x8, 0x800, 0x5f0a, 0x2, 0x7, 0x81, 0x1, 0x4, 0x9, 0x3000, 0x3, 0x2f, 0x0, 0xfffff800, 0x1, 0xf, 0x8, 0x6f, 0x5, 0x10, 0x7, 0x9, 0x40, 0x0, 0xffff, 0x2, 0x5, 0x10000, 0x80000000, 0x0, 0x7, 0x7, 0x1, 0x1, 0x2, 0xd8, 0x3, 0x92, 0xfffffffb, 0x0, 0x7, 0x7f00000, 0x80000001, 0x0, 0x7, 0x7, 0x10000, 0x6, 0x8, 0x0, 0x9, 0xffffffc0, 0x1, 0x3, 0xffff0000, 0x4, 0x0, 0xb, 0x0, 0x0, 0x6e98, 0x4, 0x2, 0x7, 0x6, 0x0, 0x100, 0x39bc, 0x33ac, 0x1000, 0x2, 0x1, 0xc, 0x9, 0x5, 0x80, 0x70, 0x3, 0x5, 0x3, 0x401, 0x6, 0x4, 0x7fff, 0xfffffe00, 0x4390, 0x14, 0x1, 0x9, 0x0, 0x8001, 0xd6a8, 0x8, 0x101, 0x4, 0x10001, 0x200, 0x3, 0x200, 0x3ff, 0x7ff, 0x2, 0x5, 0x7, 0x1ff, 0xf20, 0x9, 0x2a37, 0xc046, 0x3, 0x9, 0xba5, 0xfff, 0x9, 0x800, 0x9, 0x7, 0x1ff, 0x2, 0x2, 0x199, 0x10, 0x1, 0x9c44, 0x5, 0x3, 0xe, 0x1, 0x2, 0x5, 0xffff, 0x0, 0x8001, 0xc70, 0x7, 0x101, 0x2, 0xe057, 0x1, 0x8, 0x4, 0x0, 0x3, 0x5, 0x1, 0x9, 0x7, 0x2, 0x8, 0x9, 0x8, 0x4, 0x0, 0x2, 0x1ff, 0x4, 0x5, 0x3, 0x2, 0x2, 0x7, 0xf, 0x3, 0x7, 0x3, 0x7f, 0x3, 0x6, 0x20400, 0x3, 0x1200000, 0x8001, 0x400, 0x4, 0x5, 0x4, 0xd, 0x6, 0x9, 0xfffffffa, 0x9, 0xffffffff, 0x5, 0x2, 0x1, 0x40, 0xb94, 0x833, 0x4, 0x10000, 0xf, 0x10001, 0x1, 0xb4, 0x6, 0x8, 0x7, 0x7, 0x3, 0x0, 0xc, 0xe66, 0x5, 0x3, 0xad12, 0xaf, 0x7, 0xb03, 0x0, 0x5, 0x5, 0xfa3, 0x3, 0x0, 0x88, 0x7fff, 0xd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3df}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000000, 0x78, 0x9, 0x4567643f, 0x8, 0x1, 0x1000, 0x9, 0x3c, 0x5, 0x6, 0x1, 0x6, 0xfffffffe, 0x1e, 0x9, 0x8, 0x80, 0x906, 0x5, 0x6, 0x4, 0x7fffffff, 0x5, 0x4, 0xd45, 0x8001, 0x8, 0xffffffff, 0x2, 0x2, 0xbc, 0x1, 0x9, 0x101, 0x7, 0xe7c3, 0xf83, 0x9fb, 0x2, 0x1, 0x80000000, 0x3, 0x2, 0x7, 0x7fffffff, 0x2, 0x5, 0x6, 0xab, 0x4, 0xb, 0x2, 0x4, 0xfffffffb, 0x6, 0xa, 0x1, 0x10001, 0x7, 0x69081c6f, 0xfffffffc, 0x2, 0x23181c81, 0x7, 0xd, 0x81, 0x1, 0x32f160e2, 0x8, 0x80000, 0x2, 0xfff, 0x1, 0xa, 0x9, 0x8, 0x0, 0x9, 0x9, 0xfffffffd, 0x9, 0xffff7fff, 0x5, 0xc, 0xffff83a1, 0x6, 0x3df, 0xfffffff9, 0x2, 0x1, 0x400, 0x80, 0x3ff, 0x1, 0x7, 0x7fff, 0x4a29f991, 0x400, 0xfffffffa, 0x3, 0x2, 0xfffffff9, 0x7, 0xfffffff8, 0x3, 0x0, 0x7fffffff, 0x3, 0xaf7, 0xfffffffb, 0x6a9, 0xa, 0xfffffff9, 0xb7c, 0x9, 0x9, 0x8, 0x2, 0x1, 0x9, 0x2, 0x6, 0xb524, 0x4, 0x0, 0x3, 0x5, 0xe, 0x2, 0x7, 0xbf14, 0x8, 0x6c, 0x101, 0x8, 0x6, 0x80000000, 0x9, 0x5, 0x1, 0xc, 0x0, 0xca, 0xfffffffb, 0x1ff, 0x0, 0x8, 0x3, 0x4, 0x9, 0x101, 0xc34, 0x401, 0x8, 0x4, 0x9, 0xffffffff, 0x5, 0xff, 0x6, 0x6, 0x5, 0x3, 0x1, 0x2, 0x2, 0x2, 0x3, 0x9, 0x2, 0xfffffffc, 0x56a, 0x0, 0x8, 0x9, 0x10001, 0x2, 0x5, 0x1, 0x0, 0xf8, 0x7, 0x7ff, 0x0, 0xffff, 0x4, 0x7, 0xd4e, 0x3d, 0x4, 0x1ff, 0x80, 0x100, 0x4, 0x3, 0xa5b, 0xf, 0x2, 0x6, 0x3fc00000, 0xac70, 0x7, 0x9, 0x5, 0x7, 0x2, 0x2cb6, 0xf, 0x0, 0x200005, 0x4, 0x6, 0x6, 0x4, 0x0, 0x8, 0x0, 0xffff, 0xfff, 0x0, 0xca70, 0x1, 0x5, 0x5, 0x2, 0x0, 0x1fffe, 0x2, 0x7, 0x80, 0x4, 0x3ff, 0xd, 0x6, 0x1, 0x6, 0x7ff, 0x7, 0x3, 0x1, 0x9, 0x9, 0x401, 0x1, 0x7, 0xfffffffc, 0x6, 0x7, 0x0, 0x3, 0x9, 0x81, 0x401, 0x7, 0x4]}], [@TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x1, 0x5, 0x3, {0xff, 0x1, 0xad, 0x1, 0xfffc, 0xfffffff8}, {0x2, 0x1, 0x3, 0x800, 0x5, 0x9}, 0xb, 0x9, 0x20}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc0, 0x4, 0x4, 0x6, 0x1ff, {0x90, 0x0, 0x7, 0xffff, 0x3, 0x81}, {0x1, 0x1, 0x9, 0x200, 0x7, 0x1}, 0xf7400000, 0x4, 0xffffffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x0, 0x7, 0xfffffffa, {0x1, 0x3, 0x2, 0xfff7, 0x8, 0x5}, {0x8, 0x0, 0x9, 0x8, 0x9, 0x3}, 0x3, 0x8, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0xffff, 0x7, 0x8, 0x9, 0xf, 0x0, 0x6, 0x2, 0x2c6dc91a, 0x9, 0x0, 0x0, 0x7fff, 0x1, 0x1, 0x7fffffff, 0x9, 0x6, 0x6, 0xb, 0x6, 0x6, 0x1, 0x8, 0x3ff, 0x8, 0x9, 0x7f, 0x100, 0x6, 0x6, 0x81, 0x100, 0xf, 0x2, 0x2, 0x0, 0x80, 0x2, 0x7fff, 0x0, 0x3, 0x4e, 0x0, 0x5, 0x2, 0x7, 0x30b, 0xa, 0x8, 0x3, 0xffff, 0x6, 0x2, 0x5, 0x40100, 0xfffffff1, 0x4, 0x3b0, 0x7, 0x3ff, 0x3, 0x9, 0x2, 0x9, 0xfffffffd, 0x2, 0x8, 0x1, 0x8, 0x9, 0x6, 0x35e, 0x4, 0x8, 0x3, 0x7fffffff, 0x0, 0x400, 0x1, 0xf8d, 0x2, 0x4, 0x5a, 0x80000000, 0x2, 0x5, 0xbe03e50, 0xfffff2b6, 0x88, 0xfff, 0x4, 0x1, 0x5, 0xb, 0xc2, 0x73, 0xaa, 0x400, 0x1a2, 0x5, 0x3ff, 0x1, 0x9, 0x7fff, 0x9, 0x1, 0x101, 0xd65, 0x1ff, 0x9, 0x5, 0xfffffffc, 0x3ff, 0x46f9c9f8, 0x0, 0x45e7, 0xee, 0xa8d, 0xb02f, 0x100, 0x2, 0xff, 0x2, 0x5, 0x80000001, 0x7, 0x8000, 0xc2be, 0xa, 0x3, 0x4, 0x9, 0x5b0, 0x8, 0x400, 0x1000, 0x0, 0x4e, 0x40, 0x2, 0x5, 0x4, 0x2, 0x2d38e943, 0x5, 0x8, 0xfb0, 0x5, 0x9, 0x8, 0x4, 0x9b, 0x5753, 0x90000, 0x3, 0x4f, 0x9, 0x4, 0x8, 0x9f3, 0x2, 0x3, 0xc77, 0x10001, 0xd, 0x80, 0xa8, 0x6, 0x9, 0x6, 0x3, 0x80000001, 0x2, 0x3, 0x4b, 0xb4, 0x3, 0x9, 0xfffffffe, 0x8, 0xb, 0x3, 0x2, 0x3, 0x401, 0x0, 0x1, 0x6, 0x1, 0x8, 0x7, 0x6, 0x6, 0x6, 0x5, 0x4, 0xfffff001, 0x0, 0x8, 0x81, 0x2, 0x1, 0xa3, 0x1ff, 0x8, 0x3ff, 0x10, 0x3f8, 0x8, 0x2, 0x3b6, 0x4, 0xffffffc7, 0x2, 0xff, 0xfffffffb, 0x2, 0x200, 0x4, 0x7, 0x10001, 0x40, 0x400, 0x8, 0xc, 0xcfad, 0x1, 0x9, 0x10000, 0x7, 0x7ff00000, 0xac, 0x2, 0x2000, 0x36b, 0x6, 0xf2a1, 0x7, 0xfc, 0x2, 0x3, 0xa, 0x1, 0xad, 0x9, 0xfffffffa, 0x6, 0x8, 0x2b4e, 0x9, 0x5, 0x4, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9b27, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x81, 0x101, 0x4bd95db2, 0xc28, 0x4, 0x9, 0x9, 0x0, 0x5, 0x7, 0xfffffc2c, 0x1, 0x3, 0x800, 0x4a3, 0xffff, 0x1, 0x916, 0x79, 0x1, 0x9, 0x0, 0x0, 0xa, 0x1, 0x5, 0x9, 0x6, 0x3, 0xc2c, 0x1, 0x3, 0xfd11, 0xfffffffa, 0x7, 0x9, 0x6, 0x8001, 0x5, 0x4, 0x0, 0x4, 0xdca00, 0x7, 0x101, 0x4, 0xbd0e, 0x7, 0x3, 0x0, 0x6, 0x4, 0x2, 0x6a, 0xd, 0x1, 0x8, 0xfffffff8, 0x10, 0x1, 0xa745, 0xfffffff7, 0x7, 0x8, 0x4, 0x7, 0x4, 0x2, 0x1, 0x4, 0x0, 0x3, 0x7, 0x0, 0x1, 0xeb89, 0x8, 0x0, 0x3, 0x7, 0xc, 0x80, 0xd0, 0x8, 0xd5d9, 0x0, 0x2, 0x7, 0xc1, 0xc2a, 0x0, 0xa, 0x1, 0x8, 0x0, 0x80000001, 0x80, 0x5, 0x0, 0x4, 0x8, 0x40, 0x32, 0x7ff, 0xf, 0xa, 0x80000001, 0x7, 0x8, 0x8, 0xa03d, 0x2, 0x1, 0x2, 0x4, 0x1, 0xffffffff, 0x101, 0x6, 0x6, 0x7, 0x36, 0x0, 0x3, 0x80000000, 0xfffff000, 0x302a, 0x1, 0x7, 0x9, 0x8, 0x0, 0x7ff, 0x0, 0x79fe528a, 0x5, 0x0, 0x3, 0x8001, 0x3e5, 0x5, 0xfffffff7, 0x9, 0x80, 0x9, 0x9, 0x0, 0xac, 0x6, 0x8, 0x7, 0x7, 0x6, 0x3, 0x0, 0x9, 0x4, 0x8, 0x199, 0x7, 0x8, 0x0, 0x6, 0x3, 0x100, 0x7, 0x0, 0x0, 0xfffffff7, 0x3, 0x1, 0x4, 0x3, 0xfffffff7, 0x3, 0x4, 0x353, 0x3, 0x101, 0x5, 0x0, 0xfffffff8, 0x0, 0x2efbd76f, 0x2, 0x9, 0x7, 0x93ac, 0x9, 0x5, 0xfffffffe, 0x0, 0x7, 0x7, 0x877, 0x400, 0x5, 0xd9, 0x2d83, 0x71a0, 0x3, 0x9, 0xe537, 0xfffffffc, 0xff, 0x4, 0x800, 0xa0c4, 0x5, 0x3e83baa0, 0x40, 0x0, 0x1, 0x2, 0xffff94fc, 0x7, 0x9, 0x80000001, 0x5, 0xffff1939, 0x3, 0x10001, 0xfffffff8, 0x0, 0x7, 0xffffffff, 0x1, 0x0, 0xf, 0x9d, 0x2, 0x9, 0xe4d8, 0x8001, 0xf38, 0xfffffffb, 0x5, 0xe0, 0x2, 0x9, 0x0, 0xa7, 0x3, 0x2, 0x42b, 0x5, 0x40, 0x800, 0x5dbb3663, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x1ff, 0x1, 0xffffffff, 0x1ff, 0xb, 0x7ff, 0x7, 0x1, 0x8, 0xffffff7f, 0x9, 0xffffffff, 0xadc9, 0x1, 0x2, 0x2, 0x4, 0x7, 0x3, 0x1e9a, 0xfffffffe, 0x9, 0x8, 0x202, 0x1, 0xa4da, 0x731c, 0x1, 0x10001, 0x2, 0x90, 0x8, 0x2, 0xfffffff7, 0x6, 0x4, 0x6, 0xa, 0x8000, 0x2, 0x3ff, 0x80000, 0x0, 0x4, 0xfff, 0x1, 0x7fffffff, 0x7f, 0x5, 0xa6, 0x2, 0x9, 0x714a961d, 0x8, 0x8, 0x4, 0x0, 0xa, 0x0, 0x1, 0xa, 0x5, 0xfffffff9, 0x40, 0x10000, 0xffffffad, 0x8000, 0x0, 0xaf, 0x2, 0xa, 0xb732, 0x7, 0x10001, 0xd, 0x9, 0x123e1ae, 0x8, 0x1, 0x6, 0x8000, 0x9, 0x883, 0xfffffff1, 0x6, 0x3, 0x4, 0x0, 0x2400, 0x3, 0xfffffbff, 0x58, 0x461d, 0x3, 0x6, 0x6, 0x4, 0x9, 0x3, 0x791b, 0x7, 0x400, 0x14a5, 0x9, 0xa, 0xd8, 0xab94, 0xfffff074, 0xffffff7f, 0x6, 0x75718c6f, 0x8001, 0x0, 0x1, 0x0, 0x6, 0xa2, 0x8, 0x8, 0x4e, 0x20, 0x5, 0x6, 0x22, 0x8, 0x1, 0xa, 0x5, 0x4261, 0x3, 0x8, 0xf6, 0x1, 0x6, 0x6, 0x1, 0x7, 0x800, 0x0, 0x200, 0x0, 0x6, 0x43, 0x9, 0x0, 0x7, 0x0, 0x400, 0x2, 0x8001, 0x8, 0xffff, 0x4, 0x4, 0x3b4d894c, 0x7, 0x5, 0x401, 0x1, 0x4d, 0x0, 0xfffffff7, 0xbea, 0x401, 0x9, 0x9, 0x7fff, 0x49, 0x6, 0xdd11, 0x4, 0x10, 0x7, 0x207, 0x7, 0x31c4546a, 0x7fffffff, 0x9, 0xfc59, 0x7fffffff, 0x4, 0x4, 0xfffffff8, 0xd5c, 0x9, 0xf41, 0xfffffffd, 0x75, 0x388, 0x9, 0xa, 0x2, 0x6, 0x0, 0x4a, 0x10001, 0x0, 0x5, 0x10001, 0x3, 0x7a7c, 0x2, 0x0, 0xf, 0x80000000, 0xffff, 0x3, 0x300000, 0x2, 0xc9ac, 0xa, 0x5, 0x3, 0x80000001, 0x1, 0x4, 0x5, 0x8, 0x4, 0xffffffff, 0x5, 0xf2f, 0x9, 0xa, 0x5, 0xfffffffc, 0x0, 0x4, 0x10, 0xfffffff1, 0xa, 0x200, 0x5, 0x7e9, 0x40, 0xd, 0x2, 0xa2, 0xb, 0x10, 0x40, 0x7f, 0x80, 0x4, 0x6fc8, 0x2, 0x0, 0x2d27eb01, 0x280000, 0x6, 0x8, 0x0, 0x3, 0x2d74f06b]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0xd, 0x6, "561f756bc60c64f552"}, {0xc, 0x7, {0x0, 0x964c260037c46705}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x140, 0xa, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x140}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xbd, 0x6, "6b17dde8c1e193034a1852cc6872125f0443edafc3dc52be89ee950ea66f08c80e627e1465372e135c8619e9f34d2583b6af2b008e88ac2d34b2285525f5af6ee459359e0d502e9a7657c97f637603da85303a9dbafef6c0f248ef46fff69e0ad1c4e104a12bb094ace0898aa16085a98a9cb6157b05f2f17ac70992bb8bcae14da583c8380a0be81b07921819e556874b122cc1005c1f90a63c9a4b35d32a66ccfaca6437455d1011113fc8a2a8aa59e042c2bca3e3cd9ff3"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x389c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.174489769s ago: executing program 1 (id=8166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0x30) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) 3.037316504s ago: executing program 3 (id=8167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000200)) r1 = socket(0x15, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000140)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', r3, 0x7d, 0x40, 0x68, 0xdde, 0x79, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x7800, 0x3, 0x7fff}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x184, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008000}, 0x40092) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 3.012430971s ago: executing program 1 (id=8168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x1c) 2.741249244s ago: executing program 1 (id=8170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000400000004000000010000000059836c12269fd420b0fdc949f0766c85d8d298873c8d586c6516a3b65d0aad20a8086e15485bb265d5b544a0d838f25e7bc7265b63adac4ed900fc2c4a0c795140ad6f27f27ba3fe63d19402619561acc7b1cb50503c73b931367b9d4858f62226d57eb7cd29e2d567000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) listen(r1, 0x10000) (async) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) socket(0x2a, 0x2, 0x0) 2.674536545s ago: executing program 0 (id=8171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x1a, 0x712, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0xfffffffe}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x200000c0) getsockopt$bt_hci(r5, 0x84, 0x3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r12) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, r13, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x20040804) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 2.488918767s ago: executing program 1 (id=8173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.480036361s ago: executing program 3 (id=8174): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x2f) listen(r1, 0xaca) r2 = socket$netlink(0x10, 0x3, 0x12) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x10) 2.329848075s ago: executing program 1 (id=8175): r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="880000000000000006000000ffffffffff4846433e69b26eef04f9b7e3d94be89bb28a1145a6e9f463c160c6753347003862bcc01f630aee90e7954160278d4d6e138f95c0a426b3cc98ebbbe6586429a3048f9b1d1c56d8b612fa05932d16bc7e04d10719f3ebf946f5fd6399bd7ffe1101aab1a50f0bc692a5ef77fd39983c510beb9c439d8a9070000000000000000b01000004000000b5d6580de37aa2f80304bac25710bf891b995bd31ecfebbe2b576e97a4fd1685f4b9bd68becc2255f1e53be44794c5c0f25edd9fbc59a94cbb6b5e7266559bae1873ec493ddf8ef3ff69b04be162b016158ad9ce414c7e46b400000000000000101000000000000002010000feffffff63b71ca7e9a131b7049ab4067710a6110864f81875a85a95ec208f8b912de055933f1bd26e2c2c5db931ce1c100c8fad34b75a62459bcbf1a5d50461103a9734e380d3580cc17a6cbf43567e4aa5c30f2dee16f0047f2654feb31d41a6a273951ba54c58be7196f4e39f16cd61442bbd9f301ca835d42de3a1b577b39c84ad23870b7603f42aa9991f405ac1ec2306812f40ff721146e40e7ce7aacc2a72d2c6f340da45c4193f87ba2da83efc6d9900dcb4293809018ab31898e1d0ca57d7dc722d6f255b766d02b872df20ccb1d123c66221e42e554b4a77702149612daed21de9bba9f1bb9591cd1e7456325217651c40484d3af62ccc92445209eca14265cae7124d98306db302bf16afa5367f48da29105cd383685f827f084434cd935a87571e5814b837aafa524f6a8a7f5e56cd72ea01eda4b6cc5885f00eb79488bde4ca40abc7e09cbd4e6210ca357f776db996664a6d1678480535933e99eda18402128045d09097b3fb4f10d471dd56a63f642240f8e91f956ce3e75c119faede2c8e35155f18ad78cb3c6801c4e12b9617ebccd6c9695ef19a57a217810b861070c02794b4716d715cebfb3a62eb17f87ac0d8c501ab71a3b15d3138da1a8af0d892c6243e9c2fa06f979db2d8e44bc2d6b8236c88f533ec00ca7389d272c1ddea5908115c2c8fe486c87b0de5a5cb3962bd1ca7dc578634ef29772a2c8a60fbdfbf384c52f5b884dc52cd6ea247756034b6a53da507c712b018440a68629e3d14fd7f02410f68aff44840fba2116c50b330a4d9c4732b9dff960068dd77c89c355c66ea6a9eef972e089b06999162ca096310f5595f698771f66ffb323875db24d63e50eb9fce7ce3b93b0a4e3fffaae9fa2bf6ee2a2583d48adaa1025132e9e55a37906c2546d8c73b00f868a04ce39586f17ab12b0a534ed09d783c5b160e17ea43d99843d61d34f0d6ecbd451bb4ff87b02c13dbc66b25792ca1dcd581339ec6189737979f5543c82b927d06d82a21f53bfcf86b80d056e74a39368507d2cd4cbc1797328f522c5b8b60acd8f4f01de9cb1a57403b0bcc3195a680b76bbe793d03e1c11cdf416298687498c68b3daf09f8424ddca8d01dbe2297c67a24e78ea3dc01b412097f848f3911bc3a8665a035e1ad578c5adf201691a12951e38a396fda95945904f9bb74ec32bbf5dde5dc7eaaa0e0976a82dc811287a8dbf62db21bb0a925c7126c4687a61531b1814f05343211d354ff51fbecfd6fd8e29a860107523fae25d420d524f4652161a7005bd05b243422f19f5db74ab78cf15e31add631b85b4de958b65e9ad3f7b4c8d0a57d34b1ef108cdb52c72e6fda5ec91dc77fcc80bcab8ec2bb354e9d7e327bc097c0071080562d0c392a243d322be404b8560a9b14a6e44c0cbee90f1b611c1ebe9a228581f52329aacf720d6c33e965b1457d808bc4b297f6c76cf89198b0e67e5102048c33c0909f93d1428f23b663d0762e36df7c7d1868bb70fa7b113cfaa0b11065f6e8ff0a49f8180b847d1770bea9463edae670e1a89b247647f48a46485516b7ec1b8ef422339f19bd1cf0bda415cafc96991c47d5a9f0b4cf1d3c2be4575955b0edd9c2858b920f77d0ef954c843773213c04f3993be79f8144324db6a6e016b3d9c2d4b6d68cd2dce9fddd5cc2bbc6c324ba20a8f9bee349efbc6794becc8b17c4d45a4f265acc0c6d8feca6e3cd2050bd8c6f948ed27dafd908b217f275baabe22f634c95d650efb11c611acf517335c72ef54839238ddd7f0f798aa9d0bcc71ffa321caa37256b327033080173bbc95713581980bc2f5287e8e8ec6172915b5230d711236848cd13cb4eac96e8399c2c880358ca264e48674dd8590c7227a2604cd3ffb2f5a78082e30a465cc8a897853a2c65d558c5e4796e35598ac39d7f16f23c123d42a42eb3b303834b37d7d3cc5df18c8aa837e04859a0c69c5718d93e693a05f741b62ff305cacec0590d68b96d5d52be9d4f49fd358fca2e328fff7b1b240a2add11f064cf6cbc913b7570b7d27e49a30948c7bacfda5c06639c5d2da796a1ba8166bf3f1d6e834567f25229301be2f63b8b7e8dbc9421d9f5a1744f0e885b92feaa5f49600ab96a3224e08003058741faf8b197b1783176f3859627668cad92f1b07f3bb0bd50bc622b09b078b091b77d2fd9340215b03db263cb5532661f48f0968e1ca5af67b9e22e3dea14eb0c5fc1e77b49d3630fb4a76990c939c22e7d08597a2d6c062e64a787cd86ac5992e8c211089ca1a1a469e1499dbbaee5fcd7e2c4f9cddf1f7ad70a4f6131ade9037f36d43dde993255864fc30a945cfc855dcd375b97ac2a17f5d236945656d1f576f2bdc76beea57bdf254ff568c3b6566bca22cd616ef438116c0c76705cc3c02ea124067bab17c2d3482891ffabf5b1e9bdc664b87773ef2602f9357a747c40926f5083fb6a01c5dd9a18df2becb5a67506b35c6d220818594c16dd7843a8c343327fef919717b09a81e5fef6d48caf51283acaaf750e3aed3cb6aa51470e866b753a9f3ba3447b1c4779efde0bc8d6ec83899c6921a9f87d5d032058c5c7f5f1c5a07097cebda2dd748d116c4e6180e3b0b09997abee326027dc30bfbe81fb520be5d889a6f7b0ff206ea6c8b9c903ca0e2d4379cfaaa31824aba0b113c866b807354ce1b5cb81ec6966a19108bf0c6cc804e7092d46c93dbfecef9398b5c7abab159fa86f05368a1c7596e12a5684ea1d7340ab7535014487bdd53094298cae30ae9b3c96c87efcaeeb2368ac6f0102d3cfd8b97e2f63f9ab1bf4eef0387f59209d0fbd583e0f463edb379eb47a7482489e4488c639c21feb03d14c893f7444c450b192fded364ae84c92f89d4ed2a15423e4befe54a8ec10f19dd1219e5de45cdb91b089d1149d899ae451e8e9c807d13479bda9278ae30e9aa320faedbe1277011659fd4382ee1ed1532fe02159f39b25ead1a18828d402540d1472d5a37adb61484b10dd6426e6be03974b6b14ec028a218846f7b3122a2a1e1f784b8081fae862458e7fe7557cf000d3173311574f9551f1911d84631ba651b67d151fce54434dba6c3cfa70a74fb52855c732cf0426420bae9d69dd11e9fb433bbd3f47fb260fe14d1a9ee38e2579841691016f722a7b7a5c119f894b101dd151b0ee37d711ae71ecd3b5b2bcb5b050eb75964c917c34bce76f33e27dd3328e70aaf0673f0f09322e4219e86ee06b9503dfaa3e6691b11f8635fea3575ebceebc5d7c73c65b9e90d6c027f014a1f149c6d3871aabc094092479f71796be1558ce297b37575530e4be6f0424fbedc590d6a062c4c5d36f3962169ccf04fb4a96d7a3658c738ab782e85223a9ba00f762ce4deab752bc11bd594acaa1dd91104ba6d2d78a26a2c5c5cdc213fb8c1a0829e74f37040b975183ef87fc44599c48c69a0d25d7f8c02c1faf34fbf9f12c139f18fdf8cf7eeedbf9a99e9d224dd80f74aa51193db5dcafe9025e9d894bb8b2b50c3f874d743f9fde8bf033c38f2ed68d4d7d4908a4be0c3146ddfe08efeca226905e1db63cbe1adbb7b511759fac494805b32142623024a3c11df94f5813b45ce4f5940eda7fba7e683086a0a5441100bf8f8edbec02ce48e70431ad8f7ac6695ebd6050439e151cc039b9d20c088fe181452da8b7bb7eec4734c036f2cd5dc9d342abc3d59cddf61e818eef28cd394fcf4ae5271476666c269961841b96f4e7e5aa45baaf5849b5d6903e339b57d119012b324693e36d9b8e6de7533cc1e2f8346fd9a8bfa05f6fec57a621952f3b0217a562af0621f04fc671751b16accc28e8f401c1fce292cea8d708fd4dfe408575bb78d331c739ebd60ec584e1516f5ae0be3d1bc8d665f6e0b670c7b36ad72b018dc08236d7852e5e7246afb39002eec05ed4999ef5b09d4fcb411aaf41a31f3baf2c71fa8a798618b226b8c554d59f0f38822668a53bd2412bfb0b395356f019243c9034e9610799071314c61fc82891c0fe0005687c2a5a868e7dbeac4c18194df53761f10f01f075ec7688bc597b571792be24ec77665c7b173d09255bce73c4a9ebd3dfcf0b383769fdd094633d2f7a884bb9c696eca2243cb9e2d885b045611e0b154de81f75fd8152d48ca098ec8946de0727ed921486847d12511ab022b0a631feef841edff17ca10f5bc011a3796a2883755b526663407a166143a4cc4d80744cb3657a20cb81c3fe45610fd35f73ca9042849236a0afa215f19c152db74864bd8d9c32b9f4b1fce2bc94be7b3892cb19885a74b65bb79f4cfc569dfbe636cc5acb1560d14ac43346c2e0bc1d347eab5fd6832225b5d47490d4c980f029753803178e3e31deb547c4eb09632fa171b1d0d4c8edf8cccaa3439dac16a5dbc9a2bf1199c307588f7e6960d3dc77370431f57bcdc7b701eb8b22d2055f2e7859f4ee498f398456cb6f51be8140c408d2836b8d5e373cbfd80f41e29422ccbe55754d870f7df1d4d2cc34a941e46ea5b161a92a6aa8582ed08d5b646e22de1a31fe9a851435c6d4bc774b701aedf3cd737ccddbe6a39f6de0a46f49ab8f5c88a17f9fe9e181ebc8e75c110b49284e120730cd95693b0b5ffe1c1ad05f623b05a606aefedd13ff1df4ec63f8ead184066007041dfd888a5f15462c1dbfab64dde798ed09d821e62c76ce4c18253e91fca732afec9abe38da481232874856779607b07299c25931ea3ab6c5002faa3e2e443d0f680e6ff4a2a669b29b160af1f024a888550326603e7b7e33458b6d747974689870afe98e49723fbf0d800f8ca4a9febc6f02e57adebab1e0f8711497b19fc2992a1cd0657f6204c3a8ae9b640099076dcc95f73e50d39f2e0a0a26e2cbbf5bddcab169047f51907980c15b3164dc1353b92b5b1e44a4584ab4e0c53a70d856ea11eb70b0dd12c69ca73e8eb19cb8465c9ce71fda096bb139d286da09e5d45a4635d583a62881ca3497bb8e8a6c1d1d7eb6b4de398db2d3a8bb684beb81e4ad2d9b90f199849b073d7da80c812b385ef7893bdc79060125a2ec2f6225cf056a0d485c3e8426a68d2f90bcf28c1271f3e61466bb89b99d465893961bb5eb6098f2f72bf8fae18c4fa762155d62879202cbab9bc763a69f8825465a914283bb3d30e3c9b98117dec87b89e38753ab46ce33aed08134537cb902a0c99e430b4f09d43f91279b4e524a86a978623d0de9a2da28694daf1ac626f0cc0bde3dd6b269db35ba8dc409f3173cda20af02ac6e7e6d778db8c294fdbbf14c5d39923596d18e2081e35d0ad0c72a4f140e3e9465c79f7a4b6fc77b4d63841ee80297832024d4bad424deb318ad93cdf453985f5a21e155b2c75778f4b673757b2a333ccec747e85f0d0d091a0d3817de47661d807e3341d057c655fce777586b9cd9f5a8063add2cda4a5aab706e4d7c8bebc64ea454eeca48066b83b89878b80b0494433e884f50721a88d5b817b7f6d2215bf10f96cf0a2b16eecdf04791339a64c28e971fc934252779edcba5e5f2bf6f2a1ca9470804afe5f8e62be0a0c87584faddf5bbcd6c085c7c65ae414af641344abbc2a29798c312d505174bb654b690824bf90be8985def558378c107d6fdce617f3abfde5c1acc4087265dc7489529771406ef1c601c0235d3bdc8725be9dd3c3452419105fbc117bcb0bf9c64abbfde56fff2bb4bb0ef2980100b33ba4c03318b8df069b11274b25246b79ef4d71e57bb38ec92beb646a8086d3635d1ad8e0f4f218073447e52b16265c218dc18b73e746a901eb28135d938000000000000000d010000d40000008670bf2194d9297170708836b74f5406427821b1c1f53d2e89ffcc5c7e738003e25305091faa270010100000000000000100000001"], 0x2260}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55}, {0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x0, {[0x6, 0x66, 0xffe00000, 0xfffffffa, 0x8, 0x1, 0x1, 0x2]}}, 0x5c) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="4000800408000100000000d5"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r4, 0x0, 0x7) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="4005014c"], 0x4) r8 = socket(0x14, 0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000140)}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r10 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) 2.209985736s ago: executing program 3 (id=8176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.206986003s ago: executing program 4 (id=8177): r0 = socket$inet(0x2, 0x80000, 0x401) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000000)='wg0\x00', 0x2, 0xfff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @local}, 0x108, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='geneve1\x00', 0xc, 0x0, 0x7}) r1 = accept4(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000240)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x140, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa24}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\',\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "48d3e77b2ad90734705a634c177d86a7af4de2535b22c1b2d170ad66c1cc71af387d8ad7a72e5b792356b716038889600abdcb11be0f371d90ce13fb9aa4137987ec51d42211570eeeedf21e793765ad736af9893adadb6234058afaf976f3778cc5e47b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040}, 0x404c814) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/191, 0xbf}], 0x3, &(0x7f0000000780)=""/107, 0x6b}, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000900)={0x0, @rand_addr, @multicast2}, &(0x7f0000000940)=0xc) recvfrom(r0, &(0x7f0000000840)=""/188, 0xbc, 0x400000a0, &(0x7f0000000980)=@ll={0x11, 0xf5, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000a00)={'veth0_to_team\x00', 0x7}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x48800) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x2, 0x2e4, [0x0, 0x200000000bc0, 0x200000000bf0, 0x200000000c20], 0x0, &(0x7f0000000b80), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x32, 0x8035, 'veth0\x00', 'dvmrp0\x00', 'nr0\x00', 'vlan0\x00', @random="883c8108eb79", [0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0xcf7da0bfa83d9087, 0x0, 0xff, 0x0, 0xff], 0xfe, 0x14e, 0x19e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x442, 0x7, 0x4, 0x2}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x7}}}], [@common=@log={'log\x00', 0x28, {{0x7f, "ccb3a63fb33d0ffd044e901383230ec3348088862377cf2542f991b64d10", 0x2c16ec2302ee532a}}}], @common=@log={'log\x00', 0x28, {{0x2, "20bbc3cac2b7eae206f9735a4c36ed2c5a891f5b71dee5fcc9253c7c254b", 0x4}}}}, {0x9, 0x8, 0x88be, 'vlan0\x00', 'xfrm0\x00', 'veth0_to_team\x00', 'gretap0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"35657a1a42bd8bcbaeddfd6203e9e76a0562ccf83c856eaeb920766d8026"}}}]}]}, 0x35c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000f40)={{0x0, 0x465, 0x3, 0x9, 0xffffffffffffffff, 0x5, 0x1, 0x81, 0x56d, 0x8, 0x3, 0xbb, 0x200, 0xa, 0x1}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000fc0)={{r5, 0x6, 0x3, 0x401, 0xfffffffffffffffc, 0x9, 0xd9, 0x1dc0, 0xfa0, 0x5, 0x2, 0xffffffffffff8001, 0x3, 0x7fff, 0x10}}) bind(r0, &(0x7f0000001fc0)=@ax25={{0x3, @bcast, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}, 0x80) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000002300)={&(0x7f0000002040)=0xbfb000000000, 0xffffffff, &(0x7f0000002080)=[{}, {}, {}], &(0x7f00000022c0)}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002380)=@generic={&(0x7f0000002340)='./file0\x00', 0x0, 0x10}, 0x18) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f00000023c0)={0x1f, @none}, 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', r3, r6, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002680)={&(0x7f0000002400)="b06176f01ee1ac4cb6b5889983d5a1f6af2d70eecfff9bbe67b5e6dc3b840bd3e81347123b0125832ebc7fee82bf94460b7f8dbe2b0b0401d0af5b0c5f48750748df60bc3f2cd946ff56374b", &(0x7f0000002480)=""/98, &(0x7f0000002500)="df28c0ec1bd94556628fdca3133760ce85f6ea31c08750f38a6e015b8a5e47b087577f1ed94a7ae618c005f4be3c99e45618078dbcf802caeb3fec32f720e71801ae2c66cbb1c750a4147c386ca880f96d4b413c7bc065a3e6a3de0394650fb8d5436782e8009dd4fd4293b4cd9960dd6cf7878fbdb332fcde0988c6e742c797526a8deb6003", &(0x7f00000025c0)="0a6dcb46ae7f0571", 0x0, r8}, 0x38) accept4(r6, &(0x7f00000026c0)=@nfc_llcp={0x27, 0x0}, &(0x7f0000002740)=0x80, 0x80800) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000002780)={0x1, 0xa, 0xfdb}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x3c, r12, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 2.013110719s ago: executing program 4 (id=8178): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000011c0)) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) r2 = socket(0x2b, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.007441982s ago: executing program 2 (id=8179): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x20, 0x2, 0x0, 0x0, "14695bdd6cf9ec7c5dc99aa13447af4209647ab255cdaf4473a56642d399f1e54e21890ba6562c585b17a01ebd13344f1bed7dc360ee7e725e57f5dc062a9413"}}}}, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.865818043s ago: executing program 0 (id=8180): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x19811, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}}, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="40100000004104002800128008000100677265001c000280080007000a01010006000300000000000800140002000000d0f2e7c9abfe3ec87847a1ffff01e999549a4a32d3255b765b981303dd1e72e01f768fa2b696719f8a1602adbd2c4bb5d3f0a69e24b2ca110aac70027588e5002505f1dd7880ba9fc4f9648f96"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.789842225s ago: executing program 4 (id=8181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.699199058s ago: executing program 2 (id=8182): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='pimreg\x00') 1.638177765s ago: executing program 0 (id=8183): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="0400700000000000040000000000008520000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.522253538s ago: executing program 3 (id=8184): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x90, 0x0, &(0x7f0000000280)="fa71ee4ee78a45466c2e6b133b63b480b77f819f676b844acc67501204ef3fd104ec287354d63fc44723bc61c2b7b0b42c57662dff76e937b72ecacbe01ab0f678bad112dad1ed02724ae914f1cc911ba11bbaf3d9947990fde5353d52e2e4f14fcb7a9c976cad3e42b7834fab01fc705309ac3abde1f775d95aa4164a30fa3a2dd44da379890d8dee266b9a7bb067bc", 0x0, 0x149c, 0x503, 0x0, 0x5c, 0x0, 0x0, 0x1, 0xffff80fe}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{}, &(0x7f0000001640), &(0x7f0000001680)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x19, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x83c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0xa, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x9, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8840) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4a, 0xd24b, 0x5, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=r3], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) 1.282327111s ago: executing program 4 (id=8185): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = accept(r0, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80) sendto$packet(r3, &(0x7f0000000440)="34196f29b9cf06690c8a46fd38d4e31a1972494180a8fbe5c8ab6a1edb26176eb411836b61117b7fd3bc6252772e3e59440c6fe8ef9fb7be7937fb00548d767467aa50a91a0e6d9e2c3f2753335ea26d350c77eca31d9265408c9033640ecafdee69", 0x62, 0x24815, &(0x7f00000004c0)={0x11, 0x1, r1, 0x1, 0xe, 0x6, @local}, 0x14) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000005c0)={r7, r8/1000+60000}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x20040800) 1.20521949s ago: executing program 2 (id=8186): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) 1.078724573s ago: executing program 3 (id=8187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x210, 0x35, 0x20, 0x70bd26, 0x25dfdbfe, {0x11}, [@generic="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", @typed={0x4, 0x113}, @generic="71f5f5bbeafaee7b4745cd1c5c4f1989e1114469bc94f2a804ed51a0b84ecc191701778ebc852187443a4f7fb9e96a21cc3749efb7d27567d4380ca460607e4bf46a511527b830995ca46e66512d7e0dffffa0c3fae15cc3f11babb0a0df1e6ba7560dfc631c74691a9c126c389547fb2f36f073c6a31ac6069615932933c88538c89c23", @generic="c4476533ed2ddcabcb1d0574a7164d49d03d884e7aa7f960b485cdfc9985e85654d55f6d44c4516c7db42510511512d6c9c58d905a36519a821ebae3d2d1b05112d4664387b090728ba5c327642b21fe475257a63cc59cb63d08abc434b96df8289e9ddaa1c29f90a3d255cfa195d16815cfc5"]}, 0x210}, 0x1, 0x0, 0x0, 0x8c4}, 0x7eeb848155b1c98c) 1.003898967s ago: executing program 4 (id=8188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000c60c11b454a0980001000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fbffffffffffffff000000000000000000000000fcffffffffffffff0000000000000000000000000001"], 0x90) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) socket$kcm(0x29, 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 868.99254ms ago: executing program 3 (id=8189): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40845) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r2, 0x215eb000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x14, 0x2, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newae={0x218, 0x1e, 0x300, 0x70bd2b, 0x25dfdbfe, {{@in=@loopback, 0x4d5, 0xa, 0x33}, @in6=@local, 0x0, 0x3500}, [@migrate={0xe8, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3c, 0x0, 0x0, 0x3502, 0x9, 0x2}, {@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@rand_addr=0x64010100, @in=@multicast2, 0x3c, 0x2, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast1, @in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x1, 0x0, 0x3507, 0x2, 0xa}]}, @algo_comp={0xee, 0x3, {{'deflate\x00'}, 0x530, "cfdae5e708e206974cd03f6f58bad7446cd653168565e86452206d7fe785f91f08ab023a48c27cdd417bfbe8b0c1174b84c69b27779bb2cb644c589f5e731800976432dceac1e8948cafcc5758dacd3e7ba025aa30033d80692e94dc2e1f5452e2f655128114104996e33111ba6072cf018dea451dd5169e333c37e7282180e9cb0f9fa6464f2193512c0f1b16be04bd57b6b11d3e28a17ba8bccf35e853818c0e873d263f28"}}]}, 0x218}}, 0x4008001) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000001c0)=0x200, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r8, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x1, 0x9]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) recvmsg$can_raw(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40000060) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x6, 0x6, @local}, 0x14) sendmmsg$sock(r10, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40100f0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffff18, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 624.796809ms ago: executing program 1 (id=8190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x800, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0xa1, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}]}, 0x44}}, 0x0) 593.985528ms ago: executing program 0 (id=8191): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000f40008000900000000001400200000000000000000020000ffffe000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r8}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020608cb0000e11a3f0e91d0371d4c18dc1cd189200000000000030000050500050005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 433.361901ms ago: executing program 4 (id=8192): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800) 371.303611ms ago: executing program 0 (id=8193): r0 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x5, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001c0000029d917c3a0cae5e17ff3b0b4f25bd7000fddbdf25c5060a000000", @ANYRES32=0x0, @ANYBLOB="01000806080001007f000001"], 0x24}}, 0x0) 286.453769ms ago: executing program 2 (id=8194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xa0}}, 0x0) 1.016519ms ago: executing program 2 (id=8195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6b, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="800000006c4fb0b5f80b7f0d124eedbcbc0671c52e474673a63a1203", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf251f0000006400228034000080080003000700000008000700ffffff7f080003000c0000000800070008000000080006000c00000008000200070000002c000080080003000200000008000400ff00000008000500070000000800050002000000080007000700000008009a0002000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) 0s ago: executing program 0 (id=8196): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000200)={r3, r4/1000+10000}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = accept4(r2, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) sendto$packet(r6, &(0x7f0000000880)="43292ee30debfa570968f8a1e0823f72c8c867ad5a879ce431c6124df81695ca48689e90e9051dd670ceb689426d8c51cc47dcaa7d3998e61e268e73676e81135a4d7b6b83e6104fb4c88f1338265b6d140cf123a80e740f6532c7913d52ff1a7fe448a9c03fce8ff00f6eb641f8644ff6793c7bf4134e5346198b438cfbf49923a7bbde8722ebeffe42d226b91d54c72b80f3", 0x93, 0x4048004, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x11) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000400)='sit0\x00', 0x10) (async, rerun: 64) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000940)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x9, 'syz1\x00', @null, 0x3, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (async) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @typed={0x4, 0x8}]}, 0x28}], 0x1}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$SIOCGIFHWADDR(r11, 0x8927, &(0x7f0000000300)={'vlan0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50) r14 = socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r16, {0xb, 0xc}, {0xb}, {0x8}}}, 0x24}}, 0x40004) kernel console output (not intermixed with test programs): Releasing backup interface [ 888.046968][ T12] bond1 (unregistering): Released all slaves [ 888.067807][ T12] bond2 (unregistering): Released all slaves [ 888.087355][ T12] bond3 (unregistering): Released all slaves [ 888.103906][ T12] bond4 (unregistering): Released all slaves [ 888.118820][ T12] bond5 (unregistering): Released all slaves [ 888.143078][ T12] bond6 (unregistering): Released all slaves [ 888.160074][ T12] bond7 (unregistering): Released all slaves [ 888.176191][ T12] bond8 (unregistering): Released all slaves [ 888.190718][ T12] bond9 (unregistering): Released all slaves [ 888.209877][ T12] bond10 (unregistering): Released all slaves [ 888.234395][ T12] bond11 (unregistering): Released all slaves [ 888.248785][ T12] bond12 (unregistering): Released all slaves [ 888.266011][ T12] bond13 (unregistering): Released all slaves [ 888.294073][ T12] bond0 (unregistering): Released all slaves [ 888.308562][ T12] bond14 (unregistering): Released all slaves [ 888.423961][T29653] tipc: Started in network mode [ 888.434433][T29653] tipc: Node identity , cluster identity 4711 [ 888.456866][T29653] tipc: Failed to set node id, please configure manually [ 888.518662][T29653] tipc: Enabling of bearer rejected, failed to enable media [ 888.581501][T29577] chnl_net:caif_netlink_parms(): no params data found [ 888.657735][T29661] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6262'. [ 888.678790][ T12] tipc: Left network mode [ 888.716245][T29665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.779482][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 888.805221][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 888.808378][T29664] bridge4: entered promiscuous mode [ 888.840614][T29664] bridge4: entered allmulticast mode [ 888.880798][ T12] IPVS: stopping backup sync thread 21897 ... [ 889.084050][T29577] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.092555][T29577] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.100061][T29577] bridge_slave_0: entered allmulticast mode [ 889.125463][T29577] bridge_slave_0: entered promiscuous mode [ 889.188108][T29577] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.213541][T29577] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.258622][T29577] bridge_slave_1: entered allmulticast mode [ 889.284509][T29577] bridge_slave_1: entered promiscuous mode [ 889.402952][T17287] Bluetooth: hci0: command tx timeout [ 889.489588][T29577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.588340][T29693] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6271'. [ 889.979768][T29662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 890.185176][T29710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6273'. [ 890.260956][T29577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.391137][T29713] netlink: 'syz.3.6273': attribute type 33 has an invalid length. [ 890.479972][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 890.610192][T29713] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 890.631705][T29713] bond0 (unregistering): Released all slaves [ 890.707894][T29577] team0: Port device team_slave_0 added [ 890.711594][T29725] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 890.859333][T29577] team0: Port device team_slave_1 added [ 891.321280][T29733] syzkaller0: entered promiscuous mode [ 891.343982][T29733] syzkaller0: entered allmulticast mode [ 891.386819][T29577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.406230][T29577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.440494][T29577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.482513][T17287] Bluetooth: hci0: command 0x040f tx timeout [ 891.553777][ T12] hsr_slave_0: left promiscuous mode [ 891.861637][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 892.236982][T29577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.253849][T29577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.318201][T29577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.526391][T29785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6286'. [ 892.730600][T29577] hsr_slave_0: entered promiscuous mode [ 892.766254][T29796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6289'. [ 892.776842][T29577] hsr_slave_1: entered promiscuous mode [ 892.795448][T29577] debugfs: 'hsr0' already exists in 'hsr' [ 892.804197][T29577] Cannot create hsr debugfs directory [ 892.806835][T29793] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6288'. [ 892.813611][T29790] syzkaller0: entered promiscuous mode [ 892.851262][T29790] syzkaller0: entered allmulticast mode [ 892.990784][T29805] IPVS: Unknown mcast interface: veth0_to_bridge [ 893.009467][T29799] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20004 [ 893.269120][ T12] IPVS: stop unused estimator thread 0... [ 893.564093][T17287] Bluetooth: hci0: command 0x040f tx timeout [ 894.170523][T29857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6299'. [ 894.510016][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6301'. [ 894.549437][T29866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6301'. [ 894.671651][T29876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6302'. [ 894.696953][T29876] xt_l2tp: v2 doesn't support IP mode [ 894.889145][T29881] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6304'. [ 894.933640][T29881] netlink: 'syz.1.6304': attribute type 64 has an invalid length. [ 894.959295][T29884] sctp: [Deprecated]: syz.4.6305 (pid 29884) Use of int in maxseg socket option. [ 894.959295][T29884] Use struct sctp_assoc_value instead [ 895.279387][T29577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.396254][T29913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6310'. [ 895.408564][T29909] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6308'. [ 895.444971][T29915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6310'. [ 895.609149][T29577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.644212][T17287] Bluetooth: hci0: command 0x040f tx timeout [ 895.684426][T29577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.754469][T29577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.815043][T29577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.876118][T29577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.908037][T29577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 895.950021][T29577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.000885][T29934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6314'. [ 896.045868][T29937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6314'. [ 896.241602][T29949] pim6reg527: entered allmulticast mode [ 896.338270][T29577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.459619][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6319'. [ 896.460155][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6319'. [ 896.480705][T29577] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.504082][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.511354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.554187][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.561452][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.966847][T29986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6327'. [ 897.229530][T29577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.371686][T29989] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.379447][T29989] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.530836][T29577] veth0_vlan: entered promiscuous mode [ 897.589682][T29577] veth1_vlan: entered promiscuous mode [ 897.956337][T30013] netlink: 'syz.1.6336': attribute type 4 has an invalid length. [ 897.965954][T29577] veth0_macvtap: entered promiscuous mode [ 897.987800][T29577] veth1_macvtap: entered promiscuous mode [ 898.127026][T29577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.176978][T29577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.275915][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.312717][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.347400][T30034] Bluetooth: MGMT ver 1.23 [ 898.351936][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.383938][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.658236][T18066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.708766][T18066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.800082][T30059] netlink: 'syz.1.6344': attribute type 21 has an invalid length. [ 898.831929][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.858633][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.958088][T30064] sit0: entered promiscuous mode [ 898.978381][T30064] netlink: 'syz.2.6346': attribute type 1 has an invalid length. [ 899.015592][T30067] tipc: Started in network mode [ 899.027555][T30067] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 899.054612][T30067] tipc: Enabling of bearer rejected, failed to enable media [ 899.539771][T30087] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 899.571536][T30087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.640367][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 899.657102][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 899.668917][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 899.680696][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 899.690469][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 899.818752][T30097] syzkaller0: entered promiscuous mode [ 899.841395][T30097] syzkaller0: entered allmulticast mode [ 900.319087][T30118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.506925][T30127] __nla_validate_parse: 10 callbacks suppressed [ 900.506949][T30127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6363'. [ 900.586298][T30133] netlink: 'syz.3.6366': attribute type 1 has an invalid length. [ 900.596768][T30124] bond3: option min_links: invalid value (18446744073709551614) [ 900.611298][T30136] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 900.626415][T30124] bond3: option min_links: allowed values 0 - 2147483647 [ 900.640095][T30124] bond3 (unregistering): Released all slaves [ 900.751856][T30133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.780421][T30136] veth0_to_bridge: entered promiscuous mode [ 900.807990][T30139] bond0: (slave geneve2): making interface the new active one [ 900.818337][T30139] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 900.891167][T30135] veth0_to_bridge: left promiscuous mode [ 901.059715][T30159] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.6372'. [ 901.096691][T30159] pimreg3: entered allmulticast mode [ 901.109201][T30159] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.6372'. [ 901.115463][T30161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6373'. [ 901.281284][T30092] chnl_net:caif_netlink_parms(): no params data found [ 901.324562][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6375'. [ 901.332211][T30168] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6374'. [ 901.389702][T30174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6375'. [ 901.478981][T30170] Cannot find del_set index 0 as target [ 901.687045][T30092] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.712293][T30092] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.724331][T17287] Bluetooth: hci3: command tx timeout [ 901.746583][T30092] bridge_slave_0: entered allmulticast mode [ 901.752937][T30180] netlink: 'syz.3.6377': attribute type 12 has an invalid length. [ 901.799829][T30092] bridge_slave_0: entered promiscuous mode [ 901.831230][T30180] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6377'. [ 901.859579][T30196] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 901.860297][T30092] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.888711][T30196] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 901.907935][T30092] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.919205][T30092] bridge_slave_1: entered allmulticast mode [ 901.928517][T30092] bridge_slave_1: entered promiscuous mode [ 902.056356][T30212] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6380'. [ 902.090055][T30181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6377'. [ 902.161457][T30092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.177248][T30092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.340097][T30092] team0: Port device team_slave_0 added [ 902.366891][T30092] team0: Port device team_slave_1 added [ 902.507839][T30092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.527541][T30092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.581367][T30092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.617134][T30092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.634653][T30092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.673919][T30092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.795199][T30241] bond1: (slave bond_slave_1): Device is not bonding slave [ 902.837786][T30241] bond1: option active_slave: invalid value (bond_slave_1) [ 902.867025][T30241] bond1 (unregistering): Released all slaves [ 902.953675][T30092] hsr_slave_0: entered promiscuous mode [ 902.961076][T30092] hsr_slave_1: entered promiscuous mode [ 902.969064][T30092] debugfs: 'hsr0' already exists in 'hsr' [ 902.975371][T30092] Cannot create hsr debugfs directory [ 903.051648][T30241] netlink: 'syz.3.6391': attribute type 1 has an invalid length. [ 903.416337][T30269] Bluetooth: MGMT ver 1.23 [ 903.568447][T30092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 903.593003][T30283] netlink: 'syz.1.6400': attribute type 1 has an invalid length. [ 903.802700][T17287] Bluetooth: hci3: command tx timeout [ 903.956265][T30092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 904.063905][T30092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 904.154384][T30092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 904.402777][T30309] netlink: 'syz.0.6405': attribute type 9 has an invalid length. [ 904.701194][T30314] geneve2: entered promiscuous mode [ 904.714001][T30314] geneve2: entered allmulticast mode [ 904.720818][T30317] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 904.825545][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 904.840010][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 904.894370][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 904.917891][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 904.961809][T30326] nbd: must specify an index to disconnect [ 904.980031][T30333] vcan0: entered allmulticast mode [ 904.992869][T30092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 905.020404][T30092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.047897][T30092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 905.104500][T30092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.128197][T30092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 905.166396][T30092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.189067][T30092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 905.215164][T30092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.372878][T30358] netlink: 'syz.3.6421': attribute type 1 has an invalid length. [ 905.530428][T30353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.738429][T30370] __nla_validate_parse: 6 callbacks suppressed [ 905.738450][T30370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6425'. [ 905.777126][T30353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.884518][T17287] Bluetooth: hci3: command tx timeout [ 905.901539][T30381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6429'. [ 905.958635][T30353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.018650][T30388] delete_channel: no stack [ 906.029375][T30092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.041035][T30386] syzkaller0: entered promiscuous mode [ 906.049208][T30386] syzkaller0: entered allmulticast mode [ 906.061200][T30388] ipt_ECN: cannot use operation on non-tcp rule [ 906.085020][T30388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.097024][T30092] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.125229][T30391] netlink: 'syz.0.6432': attribute type 1 has an invalid length. [ 906.170789][T30353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.215693][T18066] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.222927][T18066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.283466][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.290702][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.436783][ T7523] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.479241][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.519599][ T7523] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.547451][ T7523] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.647887][T30092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.689124][T30092] veth0_vlan: entered promiscuous mode [ 906.702984][T30092] veth1_vlan: entered promiscuous mode [ 906.731731][T30092] veth0_macvtap: entered promiscuous mode [ 906.741711][T30092] veth1_macvtap: entered promiscuous mode [ 906.765481][T30092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.780855][T30092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.799718][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.809339][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.824278][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.833975][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.978337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.987007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.020694][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.028833][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.090365][T30401] syzkaller0: entered promiscuous mode [ 907.097411][T30401] syzkaller0: entered allmulticast mode [ 907.962688][T17287] Bluetooth: hci3: command tx timeout [ 909.717778][T17287] Bluetooth: hci5: link tx timeout [ 909.724110][T17287] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 911.806802][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 929.588336][T30449] xt_hashlimit: size too large, truncated to 1048576 [ 929.930809][T30463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6447'. [ 929.958093][T30467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.978942][T30463] xt_hashlimit: size too large, truncated to 1048576 [ 930.027834][T30469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6448'. [ 930.137558][T30475] bridge_slave_0 (unregistering): left allmulticast mode [ 930.148555][T30475] bridge_slave_0 (unregistering): left promiscuous mode [ 930.156596][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.406632][T30486] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6454'. [ 930.489144][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6455'. [ 930.955576][T30509] bridge7: entered promiscuous mode [ 931.009262][T30509] bridge7: entered allmulticast mode [ 931.607640][T30542] netlink: 'syz.4.6468': attribute type 2 has an invalid length. [ 931.646515][T30542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6468'. [ 931.735907][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.884990][T30553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6471'. [ 931.904424][T30553] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6471'. [ 931.934470][T30556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6471'. [ 931.940541][T30559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6471'. [ 931.974525][T30556] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6471'. [ 932.442270][T30583] netlink: 'syz.1.6476': attribute type 1 has an invalid length. [ 932.516739][T30583] netlink: 'syz.1.6476': attribute type 1 has an invalid length. [ 932.642952][T30595] nbd: must specify a device to reconfigure [ 932.870045][T30605] sctp: [Deprecated]: syz.2.6481 (pid 30605) Use of int in maxseg socket option. [ 932.870045][T30605] Use struct sctp_assoc_value instead [ 933.776503][T30608] bridge2: entered promiscuous mode [ 933.792161][T30608] bridge2: entered allmulticast mode [ 933.895834][T30666] tls_set_device_offload_rx: netdev not found [ 934.049294][T30677] syzkaller0: entered promiscuous mode [ 934.068736][T30677] syzkaller0: entered allmulticast mode [ 934.117344][T30673] syzkaller0: entered promiscuous mode [ 934.120032][T30681] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 934.135916][T30673] syzkaller0: entered allmulticast mode [ 934.288986][T30681] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 934.310728][T30684] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 934.337295][T30684] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 934.367158][T30689] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 934.412606][T30689] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 934.434848][T30692] netlink: 'syz.4.6503': attribute type 18 has an invalid length. [ 935.386789][T30736] __nla_validate_parse: 16 callbacks suppressed [ 935.386811][T30736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6521'. [ 935.398082][T30738] netlink: 'syz.2.6522': attribute type 29 has an invalid length. [ 935.424294][T30741] netlink: 'syz.2.6522': attribute type 29 has an invalid length. [ 935.425121][T30742] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6522'. [ 935.453107][T30736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6521'. [ 935.469894][T30742] unsupported nla_type 58 [ 935.506986][T30712] bridge5: entered promiscuous mode [ 935.514518][T30712] bridge5: entered allmulticast mode [ 935.667329][T30750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6524'. [ 935.688780][T30754] syzkaller0: entered promiscuous mode [ 935.703542][T30754] syzkaller0: entered allmulticast mode [ 935.976575][T30761] syzkaller1: entered promiscuous mode [ 936.002332][T30761] syzkaller1: entered allmulticast mode [ 936.091513][T30767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6529'. [ 936.412808][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 936.506219][T30776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.514368][T30777] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 936.527572][T30777] bond1: entered allmulticast mode [ 936.581575][T30787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6535'. [ 936.633187][T30789] validate_nla: 1 callbacks suppressed [ 936.633209][T30789] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 936.708411][T30789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.824447][T30792] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 936.831109][T30798] netlink: 'syz.1.6539': attribute type 1 has an invalid length. [ 936.842241][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.866770][T30801] netlink: 'syz.4.6540': attribute type 1 has an invalid length. [ 936.884935][T30801] netlink: 'syz.4.6540': attribute type 1 has an invalid length. [ 936.913057][T30797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6539'. [ 936.958484][T30806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6541'. [ 936.961263][T30789] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 936.979730][T30792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.990281][T30792] bond2: (slave bond3): Enslaving as an active interface with a down link [ 937.110946][T30789] bond2: peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 937.502966][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6548'. [ 937.509132][T30820] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 937.529883][T30820] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 937.588175][T30822] gtp3: entered promiscuous mode [ 937.607417][T30822] gtp3: entered allmulticast mode [ 937.686596][T30826] netlink: 'syz.0.6547': attribute type 10 has an invalid length. [ 938.177024][T30826] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.213490][T30826] bridge_slave_1: left allmulticast mode [ 938.221682][T30826] bridge_slave_1: left promiscuous mode [ 938.251187][T30826] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.347244][T30826] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 938.521051][T30852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.984915][T30877] netlink: 'syz.4.6563': attribute type 1 has an invalid length. [ 939.035752][T30887] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 939.046020][T30887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.219331][T30894] : entered promiscuous mode [ 939.556495][T30901] IPVS: Error connecting to the multicast addr [ 939.933508][T30940] netlink: 'syz.0.6579': attribute type 21 has an invalid length. [ 940.343373][T30970] netlink: 'syz.2.6589': attribute type 4 has an invalid length. [ 940.505876][T30983] netlink: 'syz.1.6593': attribute type 1 has an invalid length. [ 940.584116][T30992] nftables ruleset with unbound set [ 940.657309][T25111] IPVS: starting estimator thread 0... [ 940.753209][T30997] IPVS: using max 25 ests per chain, 60000 per kthread [ 940.977788][T31013] __nla_validate_parse: 8 callbacks suppressed [ 940.977811][T31013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6601'. [ 941.005041][T31013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6601'. [ 941.097924][T31020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6605'. [ 941.126014][T31022] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6606'. [ 941.137363][T31023] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6606'. [ 941.200887][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'. [ 941.281511][T31028] xt_hashlimit: size too large, truncated to 1048576 [ 941.369319][T31037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6611'. [ 941.418499][T31037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 941.431457][T31037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6611'. [ 941.440719][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 941.457724][T31037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.470671][T31037] bond3: (slave bond0): making interface the new active one [ 941.485014][T31037] bond3: (slave bond0): Enslaving as an active interface with an up link [ 941.485120][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319d4c00: rx timeout, send abort [ 941.548894][T31041] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.556666][T31041] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.573825][T31041] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.581178][T31041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.588809][T31041] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.596071][T31041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.615901][T31045] openvswitch: netlink: Unknown key attributes 2 [ 941.617250][T31041] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 941.631310][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 941.821169][ T29] audit: type=1804 audit(1777090176.093:108): pid=31050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6617" name="/newroot/94/cgroup.controllers" dev="tmpfs" ino=500 res=1 errno=0 [ 941.874305][ T29] audit: type=1800 audit(1777090176.123:109): pid=31050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6617" name="cgroup.controllers" dev="tmpfs" ino=500 res=0 errno=0 [ 941.940143][T31056] validate_nla: 1 callbacks suppressed [ 941.940167][T31056] netlink: 'syz.1.6619': attribute type 1 has an invalid length. [ 941.985282][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319d7800: rx timeout, send abort [ 942.002965][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319d4c00: abort rx timeout. Force session deactivation [ 942.003392][T31056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 942.132167][T31063] xt_TCPMSS: Only works on TCP SYN packets [ 942.143951][T31061] bond5: (slave veth7): Enslaving as an active interface with a down link [ 942.225103][T31056] bond5: (slave veth0_to_bond): making interface the new active one [ 942.239480][T31056] veth0_to_bond: entered promiscuous mode [ 942.246426][T31056] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 942.246899][T31070] netlink: 'syz.2.6623': attribute type 10 has an invalid length. [ 942.307097][T31064] bond5: (slave veth9): Enslaving as an active interface with a down link [ 942.328235][T31064] netlink: 'syz.1.6619': attribute type 1 has an invalid length. [ 942.338964][T31064] netlink: 'syz.1.6619': attribute type 2 has an invalid length. [ 942.448468][T31070] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 942.493655][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319d7800: abort rx timeout. Force session deactivation [ 942.644529][T31090] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 943.154495][T31108] bridge1: port 1(vlan2) entered blocking state [ 943.173624][T31108] bridge1: port 1(vlan2) entered disabled state [ 943.180696][T31108] vlan2: entered allmulticast mode [ 943.203658][T31108] bridge1: entered allmulticast mode [ 943.234301][T31108] vlan2: left allmulticast mode [ 943.239223][T31108] bridge1: left allmulticast mode [ 943.499888][T31109] syzkaller0: entered promiscuous mode [ 943.507629][T31109] syzkaller0: entered allmulticast mode [ 943.766836][T31136] netlink: 'syz.2.6637': attribute type 1 has an invalid length. [ 944.592896][ T29] audit: type=1804 audit(1777090178.863:110): pid=31159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6641" name="/newroot/69/cgroup.controllers" dev="tmpfs" ino=369 res=1 errno=0 [ 944.642157][ T29] audit: type=1800 audit(1777090178.863:111): pid=31159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6641" name="cgroup.controllers" dev="tmpfs" ino=369 res=0 errno=0 [ 945.055647][T31178] netlink: 'syz.0.6646': attribute type 10 has an invalid length. [ 948.034696][T31201] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 948.298480][T31225] __nla_validate_parse: 5 callbacks suppressed [ 948.298499][T31225] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6657'. [ 948.383709][T31230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6656'. [ 949.277622][T31272] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6667'. [ 949.303438][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 949.357012][T31277] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6667'. [ 949.468309][T31280] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6669'. [ 949.517437][T31280] netlink: 'syz.4.6669': attribute type 2 has an invalid length. [ 949.546725][T31280] netlink: 'syz.4.6669': attribute type 1 has an invalid length. [ 949.559329][T31288] netlink: 'syz.3.6671': attribute type 2 has an invalid length. [ 949.584906][T31289] netlink: 'syz.3.6671': attribute type 2 has an invalid length. [ 949.623233][T31292] team0: No ports can be present during mode change [ 949.687573][T31245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6660'. [ 949.788270][T31296] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6673'. [ 949.799799][T31300] openvswitch: netlink: ERSPAN option length err (len 9618, max 255). [ 949.818017][T31300] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 949.977444][T31309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6676'. [ 950.007338][T31308] xt_CONNSECMARK: invalid mode: 0 [ 950.031862][T31312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6678'. [ 950.275865][T31322] wireguard0: entered promiscuous mode [ 950.281586][T31322] wireguard0: entered allmulticast mode [ 950.419013][T31333] bridge2: entered promiscuous mode [ 950.430799][T31333] bridge2: entered allmulticast mode [ 950.668092][T31341] netlink: 'syz.0.6686': attribute type 1 has an invalid length. [ 950.734726][T31341] netlink: 'syz.0.6686': attribute type 7 has an invalid length. [ 950.806400][T31341] netlink: 'syz.0.6686': attribute type 8 has an invalid length. [ 950.832405][T31341] NCSI netlink: No device for ifindex 65584 [ 950.847752][T31355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.584811][T31400] netlink: 'syz.2.6702': attribute type 1 has an invalid length. [ 951.714680][T31400] bond1: entered promiscuous mode [ 951.736756][T31400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.424610][T31448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.443545][T31451] netlink: 'syz.1.6718': attribute type 2 has an invalid length. [ 952.457262][T31451] netlink: 'syz.1.6718': attribute type 2 has an invalid length. [ 952.491592][T31451] vcan0: entered promiscuous mode [ 952.502174][T31451] vcan0: entered allmulticast mode [ 953.039923][T31468] veth5: entered allmulticast mode [ 954.227902][T31494] __nla_validate_parse: 5 callbacks suppressed [ 954.227922][T31494] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6736'. [ 954.483286][T31516] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 954.702892][ T7526] veth0_to_bond: left promiscuous mode [ 954.735134][T31526] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6742'. [ 954.780191][T31526] netlink: 'syz.2.6742': attribute type 2 has an invalid length. [ 956.074243][T31561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6751'. [ 956.348534][T31567] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20002 [ 957.009806][T31587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6756'. [ 957.093025][T31580] bond2: entered allmulticast mode [ 957.142686][T31586] netlink: 'syz.4.6757': attribute type 2 has an invalid length. [ 957.216147][T31587] veth3: entered allmulticast mode [ 957.246969][T31587] bond2: (slave veth3): Enslaving as an active interface with an up link [ 957.309253][T31580] bond2 (unregistering): (slave veth3): Releasing backup interface [ 957.355633][T31580] bond2 (unregistering): Released all slaves [ 957.369632][T31598] openvswitch: netlink: Key type 345 is out of range max 32 [ 957.628832][T31603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6762'. [ 957.702781][T31609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6765'. [ 957.733557][T31607] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 957.771086][T31607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 957.793178][T31613] netlink: 'syz.0.6764': attribute type 1 has an invalid length. [ 957.865162][T31618] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6766'. [ 958.129806][T31628] netlink: 'syz.4.6768': attribute type 1 has an invalid length. [ 958.225387][T31630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6768'. [ 958.382241][T31636] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6770'. [ 958.438781][T31636] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 958.615892][T31644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6774'. [ 958.919602][T31653] netlink: 'syz.1.6776': attribute type 3 has an invalid length. [ 959.496233][T31674] xt_hashlimit: size too large, truncated to 1048576 [ 959.505944][T31671] xt_socket: unknown flags 0x50 [ 959.518063][T31679] xt_hashlimit: size too large, truncated to 1048576 [ 959.847792][T31688] netlink: 'syz.3.6784': attribute type 4 has an invalid length. [ 959.862668][T31688] __nla_validate_parse: 2 callbacks suppressed [ 959.862690][T31688] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6784'. [ 960.037296][T31697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6787'. [ 960.068838][T31695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6786'. [ 960.100025][T31699] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 960.112891][T31699] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20000 [ 960.133097][T31699] IPVS: Unknown mcast interface: bridge_slave_0 [ 960.206021][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6790'. [ 960.299284][T31705] hsr_slave_1 (unregistering): left promiscuous mode [ 961.484533][T31784] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 961.508675][T31794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6809'. [ 961.572950][T31784] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 961.650705][T31784] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 961.672826][T31800] netlink: 'syz.1.6815': attribute type 12 has an invalid length. [ 961.695347][T31802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6814'. [ 961.715283][T31784] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 961.808280][T31800] bond6: option primary_reselect: invalid value (255) [ 961.848141][T31800] bond6 (unregistering): Released all slaves [ 961.901259][T31811] 8021q: VLANs not supported on lo [ 961.944764][T31810] 8021q: VLANs not supported on lo [ 961.949153][T31816] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6818'. [ 962.084438][T18064] smbdirect: ib_dev[syz2] removed [ 962.274532][T31832] netlink: 'syz.3.6824': attribute type 2 has an invalid length. [ 962.358451][T31838] netlink: 'syz.2.6826': attribute type 83 has an invalid length. [ 962.964484][T31863] netlink: 'syz.4.6834': attribute type 21 has an invalid length. [ 962.973353][T31863] netlink: 'syz.4.6834': attribute type 22 has an invalid length. [ 962.981358][T31863] netlink: 'syz.4.6834': attribute type 23 has an invalid length. [ 962.991906][T31863] netlink: 'syz.4.6834': attribute type 25 has an invalid length. [ 963.000283][T31863] netlink: 'syz.4.6834': attribute type 26 has an invalid length. [ 963.010489][T31863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6834'. [ 963.025937][T31863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6834'. [ 963.078506][T31861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6834'. [ 963.447660][T31877] netlink: 'syz.3.6840': attribute type 11 has an invalid length. [ 963.488507][T31877] netlink: 'syz.3.6840': attribute type 11 has an invalid length. [ 963.704678][T31891] syzkaller0: entered promiscuous mode [ 963.738046][T31891] syzkaller0: entered allmulticast mode [ 964.070834][T18066] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.106961][T18066] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.147383][T18066] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.197832][T18066] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.472995][T31927] xt_hashlimit: size too large, truncated to 1048576 [ 965.026564][T31959] __nla_validate_parse: 6 callbacks suppressed [ 965.026585][T31959] netlink: 640 bytes leftover after parsing attributes in process `syz.1.6858'. [ 965.078102][T31960] netlink: 640 bytes leftover after parsing attributes in process `syz.1.6858'. [ 965.093874][T31959] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 965.132080][T31960] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 965.547571][T31995] netlink: 'syz.0.6865': attribute type 10 has an invalid length. [ 965.716901][T31995] team0: Port device dummy0 added [ 966.158392][T32020] syzkaller0: entered promiscuous mode [ 966.178015][T32020] syzkaller0: entered allmulticast mode [ 966.524109][T32045] netlink: 'syz.3.6876': attribute type 1 has an invalid length. [ 966.550225][T32046] netlink: 'syz.4.6875': attribute type 1 has an invalid length. [ 966.603451][T32045] bond4: entered promiscuous mode [ 966.609048][T32045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 966.676168][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6878'. [ 966.703375][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6878'. [ 966.713524][T32055] block nbd5: Unsupported socket: should be TCP or UNIX. [ 966.735159][T32045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 966.744060][T32045] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 966.755224][T32045] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 966.795668][T32045] bond4: (slave ip6gre1): making interface the new active one [ 966.805261][T32045] ip6gre1: entered promiscuous mode [ 966.813781][T32045] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 966.915860][T32064] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6881'. [ 966.957490][T32061] tipc: Enabling of bearer rejected, failed to enable media [ 966.977759][T32064] netlink: 'syz.4.6881': attribute type 10 has an invalid length. [ 967.021880][T32064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6881'. [ 967.069695][T32064] batadv0: entered promiscuous mode [ 967.112646][T32064] batadv0: entered allmulticast mode [ 967.130397][T32064] bridge0: port 3(batadv0) entered blocking state [ 967.174048][T32064] bridge0: port 3(batadv0) entered disabled state [ 967.224864][T32064] bridge0: port 3(batadv0) entered blocking state [ 967.231507][T32064] bridge0: port 3(batadv0) entered forwarding state [ 967.250009][T32072] netlink: 'syz.1.6883': attribute type 5 has an invalid length. [ 967.260545][T32082] netlink: 'syz.0.6885': attribute type 2 has an invalid length. [ 967.277335][T32067] netlink: 'syz.1.6883': attribute type 5 has an invalid length. [ 967.306423][T32082] netlink: 'syz.0.6885': attribute type 2 has an invalid length. [ 967.454541][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 967.464746][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 967.726590][T32108] can: request_module (can-proto-0) failed. [ 967.985819][T32125] --map-set only usable from mangle table [ 968.130611][T32143] delete_channel: no stack [ 968.345356][T32155] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6904'. [ 968.780104][T32175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6912'. [ 968.818938][T32180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 968.859197][T32175] bond2: entered promiscuous mode [ 969.080175][T32192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.443384][T32197] syzkaller0: entered promiscuous mode [ 969.461313][T32197] syzkaller0: entered allmulticast mode [ 969.488999][T32200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6920'. [ 970.221638][T32232] netlink: 'syz.0.6929': attribute type 4 has an invalid length. [ 970.276781][T32237] netlink: 'syz.0.6929': attribute type 4 has an invalid length. [ 973.347146][T32238] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 973.448566][T32246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.504893][T32265] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6933'. [ 973.546061][T32265] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6933'. [ 973.660807][T32275] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6936'. [ 973.711899][T32281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6936'. [ 973.800407][T32286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.949802][T32294] netlink: 'syz.3.6942': attribute type 1 has an invalid length. [ 973.978112][T32297] netlink: 'syz.0.6943': attribute type 1 has an invalid length. [ 973.978142][T32298] bond2: (slave veth0_to_bond): Releasing active interface [ 974.008652][T32298] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 974.039127][T32304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6943'. [ 974.089842][T32294] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 974.097864][T32297] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 974.120609][T32308] netlink: 'syz.4.6945': attribute type 1 has an invalid length. [ 974.141884][T32308] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6945'. [ 974.252996][T32316] xt_hashlimit: size too large, truncated to 1048576 [ 974.669227][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'. [ 974.797395][T32339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6955'. [ 974.900207][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6955'. [ 974.929221][T32349] netlink: 'syz.0.6957': attribute type 10 has an invalid length. [ 974.944978][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6957'. [ 975.311510][T32370] netlink: 'syz.1.6962': attribute type 5 has an invalid length. [ 975.505650][T32376] syzkaller0: entered promiscuous mode [ 975.523479][T32376] syzkaller0: entered allmulticast mode [ 975.617682][T32388] netlink: 'syz.0.6970': attribute type 1 has an invalid length. [ 976.088109][ T44] IPVS: starting estimator thread 0... [ 976.203442][T32416] IPVS: using max 24 ests per chain, 57600 per kthread [ 976.467586][T32432] delete_channel: no stack [ 976.779455][T32447] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 977.260696][T32480] netlink: Unknown conntrack attr (0) [ 977.269852][T32482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 977.470600][T32491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.498822][T32492] netlink: 'syz.4.7004': attribute type 1 has an invalid length. [ 977.944427][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe0 [ 978.055204][T32527] netlink: 'syz.3.7011': attribute type 1 has an invalid length. [ 978.266285][T32527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 978.309057][T32529] vlan2: entered allmulticast mode [ 978.315172][T32529] bond5: entered allmulticast mode [ 978.639263][T32550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.656723][T32550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.680220][T32550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.694524][T32550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.705632][T32550] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 978.715478][T32550] batman_adv: batadv0: Removing interface: ipvlan2 [ 979.103611][T32578] __nla_validate_parse: 11 callbacks suppressed [ 979.103633][T32578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.121304][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.133324][T32578] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.143257][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.171343][T32578] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.199180][T32578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.209387][T32578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7026'. [ 979.574541][T32603] IPv6: addrconf: prefix option has invalid lifetime [ 979.624076][T32605] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7032'. [ 979.686759][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7033'. [ 979.717908][T32609] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7034'. [ 979.834744][T32614] netlink: 'syz.2.7036': attribute type 4 has an invalid length. [ 979.883972][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 979.973996][T32623] netlink: 'syz.3.7040': attribute type 1 has an invalid length. [ 980.086665][T32625] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 980.811390][T32661] syzkaller0: entered promiscuous mode [ 980.820146][T32661] syzkaller0: entered allmulticast mode [ 981.347259][T32674] netem: unknown loss type 0 [ 981.366054][T32674] netem: change failed [ 981.829416][T32688] lo: entered allmulticast mode [ 981.881576][T32689] syzkaller1: entered promiscuous mode [ 981.892742][T32689] syzkaller1: entered allmulticast mode [ 981.910264][T32689] syzkaller1: left promiscuous mode [ 981.933748][T32689] syzkaller1: left allmulticast mode [ 981.960782][T32689] tipc: Failed to obtain node identity [ 981.975946][T32689] tipc: Enabling of bearer rejected, failed to enable media [ 982.452878][T32706] pimreg: entered allmulticast mode [ 982.818851][T32724] GUP no longer grows the stack in syz.0.7070 (32724): 200000003000-20000000a000 (200000001000) [ 982.844165][T32729] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.873189][T32724] CPU: 0 UID: 0 PID: 32724 Comm: syz.0.7070 Not tainted syzkaller #0 PREEMPT(full) [ 982.873224][T32724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 982.873238][T32724] Call Trace: [ 982.873247][T32724] [ 982.873258][T32724] dump_stack_lvl+0xe8/0x150 [ 982.873301][T32724] __get_user_pages+0x2378/0x2720 [ 982.873343][T32724] ? __gup_longterm_locked+0xc4e/0x1630 [ 982.873385][T32724] ? __gup_longterm_locked+0xc4e/0x1630 [ 982.873417][T32724] ? down_read_killable+0x1bb/0x340 [ 982.873446][T32724] __gup_longterm_locked+0xdcf/0x1630 [ 982.873475][T32724] ? lock_acquire+0x106/0x350 [ 982.873529][T32724] gup_fast_fallback+0x1d84/0x20d0 [ 982.873586][T32724] ? __pfx_gup_fast_fallback+0x10/0x10 [ 982.873612][T32724] ? is_valid_gup_args+0x11f/0x200 [ 982.873637][T32724] ? get_user_pages_fast+0x4d/0xb0 [ 982.873663][T32724] __iov_iter_get_pages_alloc+0x370/0xa10 [ 982.873707][T32724] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 982.873739][T32724] iov_iter_get_pages2+0x5e/0xa0 [ 982.873770][T32724] __se_sys_vmsplice+0x7c7/0x1620 [ 982.873819][T32724] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 982.873844][T32724] ? __pfx_futex_wait+0x10/0x10 [ 982.873952][T32724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.873976][T32724] do_syscall_64+0x15f/0xf80 [ 982.874006][T32724] ? trace_irq_disable+0x3b/0x140 [ 982.874036][T32724] ? clear_bhb_loop+0x40/0x90 [ 982.874064][T32724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.874086][T32724] RIP: 0033:0x7f1bd579cdd9 [ 982.874108][T32724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.874127][T32724] RSP: 002b:00007f1bd662e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 982.874151][T32724] RAX: ffffffffffffffda RBX: 00007f1bd5a15fa0 RCX: 00007f1bd579cdd9 [ 982.874167][T32724] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 982.874181][T32724] RBP: 00007f1bd5832d69 R08: 0000000000000000 R09: 0000000000000000 [ 982.874195][T32724] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 982.874208][T32724] R13: 00007f1bd5a16038 R14: 00007f1bd5a15fa0 R15: 00007ffc74eadf98 [ 982.874245][T32724] [ 983.388820][T32755] bridge5: entered promiscuous mode [ 983.396322][T32755] bridge5: entered allmulticast mode [ 983.726911][ T311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 984.138094][ T337] __nla_validate_parse: 6 callbacks suppressed [ 984.138117][ T337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7092'. [ 987.396426][ T350] syzkaller0: entered promiscuous mode [ 987.413054][ T350] syzkaller0: entered allmulticast mode [ 988.307234][ T408] netlink: 'syz.4.7115': attribute type 29 has an invalid length. [ 988.326069][ T408] netlink: 'syz.4.7115': attribute type 29 has an invalid length. [ 988.635158][ T424] xt_hashlimit: size too large, truncated to 1048576 [ 989.073326][ T436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7123'. [ 990.107904][ T474] sctp: [Deprecated]: syz.0.7133 (pid 474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 990.107904][ T474] Use struct sctp_sack_info instead [ 990.146161][ T473] netlink: 'syz.1.7132': attribute type 1 has an invalid length. [ 990.179301][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7132'. [ 990.293219][ T477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7134'. [ 990.373467][ T482] netlink: 5288 bytes leftover after parsing attributes in process `syz.0.7136'. [ 990.477189][ T488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7137'. [ 990.771198][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7137'. [ 991.373573][ T490] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 991.400681][ T490] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 991.485832][ T491] macvlan2: entered promiscuous mode [ 991.500740][ T491] macvlan2: entered allmulticast mode [ 991.522890][ T491] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 991.599189][ T492] lo speed is unknown, defaulting to 1000 [ 991.629770][ T505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7141'. [ 991.858742][ T508] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 991.898931][ T508] bond2: (slave lo): Enslaving as an active interface with an up link [ 991.926674][ T508] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 991.943338][ T492] lo speed is unknown, defaulting to 1000 [ 991.967829][ T492] lo speed is unknown, defaulting to 1000 [ 992.585639][T20871] lo speed is unknown, defaulting to 1000 [ 992.603369][ T492] infiniband syz2: set down [ 992.617649][ T492] infiniband syz2: added lo [ 992.666776][ T492] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 992.686217][ T492] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 992.707244][ T492] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 992.797604][ T492] RDS/IB: syz2: added [ 992.805695][ T544] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7151'. [ 992.816140][ T492] smc: adding ib device syz2 with port count 1 [ 992.830854][ T492] smc: ib device syz2 port 1 has no pnetid [ 992.837691][ T545] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7151'. [ 992.862415][ T5915] lo speed is unknown, defaulting to 1000 [ 992.872165][ T492] lo speed is unknown, defaulting to 1000 [ 993.181652][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.537926][ T492] lo speed is unknown, defaulting to 1000 [ 993.889926][ T568] netlink: 'syz.2.7159': attribute type 15 has an invalid length. [ 993.905396][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 993.959155][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 993.960726][ T571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7160'. [ 993.986069][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.000803][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.020683][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.193108][ T583] netlink: 'syz.2.7164': attribute type 1 has an invalid length. [ 994.277500][ T583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 994.278737][ T586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.370148][ T492] lo speed is unknown, defaulting to 1000 [ 994.806045][ T492] lo speed is unknown, defaulting to 1000 [ 995.103828][ T621] netlink: 'syz.0.7176': attribute type 29 has an invalid length. [ 995.209140][ T629] __nla_validate_parse: 9 callbacks suppressed [ 995.209162][ T629] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7179'. [ 995.233481][ T628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7178'. [ 995.253827][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 995.265959][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 995.428118][ T629] syzkaller0: entered promiscuous mode [ 995.457325][ T629] syzkaller0: entered allmulticast mode [ 995.468337][ T492] lo speed is unknown, defaulting to 1000 [ 995.804341][ T658] netlink: 'syz.2.7187': attribute type 1 has an invalid length. [ 995.839011][ T658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7187'. [ 995.896663][ T658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 996.207194][ T492] lo speed is unknown, defaulting to 1000 [ 996.786097][ T492] lo speed is unknown, defaulting to 1000 [ 997.240016][ T679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7193'. [ 997.311578][ T689] netlink: 'syz.3.7196': attribute type 30 has an invalid length. [ 997.531310][ T492] lo speed is unknown, defaulting to 1000 [ 997.735678][ T700] IPVS: Scheduler module ip_vs_sip not found [ 997.746660][ T699] IPVS: Scheduler module ip_vs_sip not found [ 997.824427][ T709] netlink: 'syz.4.7200': attribute type 1 has an invalid length. [ 997.848469][ T709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7200'. [ 997.929703][ T709] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 997.997721][ T688] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 998.020879][ T688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7197'. [ 998.135428][ T716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7202'. [ 998.561710][ T492] lo speed is unknown, defaulting to 1000 [ 998.910075][ T730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7205'. [ 999.449083][ T750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7213'. [ 999.467492][ T750] : renamed from veth1_vlan (while UP) [ 999.486564][ T753] netlink: 'syz.1.7215': attribute type 3 has an invalid length. [ 999.634196][ T762] netlink: 'syz.3.7216': attribute type 1 has an invalid length. [ 999.695289][ T764] netlink: 'syz.1.7217': attribute type 1 has an invalid length. [ 1000.037798][ T765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1000.285564][ T777] __nla_validate_parse: 2 callbacks suppressed [ 1000.285584][ T777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1000.501714][ T792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1000.536141][ T792] lo: Caught tx_queue_len zero misconfig [ 1000.626644][ T795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1000.651295][ T795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1000.669680][ T792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1000.866617][ T814] netlink: 'syz.2.7233': attribute type 1 has an invalid length. [ 1000.987336][ T822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7235'. [ 1000.999064][ T814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1001.010571][ T819] bond3: option mode: unable to set because the bond device is up [ 1001.020178][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7235'. [ 1001.060706][ T815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1001.085068][ T815] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1001.111300][ T834] netlink: 'syz.0.7240': attribute type 1 has an invalid length. [ 1001.121643][ T815] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1001.143881][ T835] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1001.151384][ T835] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1001.161428][ T835] veth0_to_bridge: entered allmulticast mode [ 1001.172601][ T839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1001.190581][ T835] veth0_to_bridge: entered promiscuous mode [ 1001.197552][ T835] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1001.218550][ T835] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1001.225898][ T835] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1001.242101][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.276019][ T815] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1001.289078][ T815] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1001.360041][ T815] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1001.381098][ T815] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1001.405294][ T846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1001.453647][ T815] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1001.480069][ T815] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1001.533762][ T857] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1001.567405][ T815] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1001.599200][ T815] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1001.636115][ T857] 8021q: VLANs not supported on gre0 [ 1001.837049][ T866] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1001.905902][ T870] netlink: 'syz.4.7250': attribute type 5 has an invalid length. [ 1002.089335][ T880] netlink: 'syz.0.7253': attribute type 20 has an invalid length. [ 1002.113894][ T881] netlink: 'syz.0.7253': attribute type 20 has an invalid length. [ 1002.199656][ T881] netlink: 'syz.0.7253': attribute type 20 has an invalid length. [ 1002.335812][ T880] netlink: 'syz.0.7253': attribute type 20 has an invalid length. [ 1002.354948][ T885] macvtap1: entered promiscuous mode [ 1002.379233][ T885] macvtap1: entered allmulticast mode [ 1002.401048][ T885] veth1_vlan: entered allmulticast mode [ 1002.474092][ T890] macvtap2: entered promiscuous mode [ 1002.492196][ T890] macvtap2: entered allmulticast mode [ 1002.766008][T25111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.077946][ T922] syzkaller1: entered promiscuous mode [ 1003.095018][ T922] syzkaller1: entered allmulticast mode [ 1003.300988][ T945] Bluetooth: MGMT ver 1.23 [ 1003.355536][ T945] xt_l2tp: v2 doesn't support IP mode [ 1004.206676][ T987] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1004.550885][ T1017] validate_nla: 6 callbacks suppressed [ 1004.550926][ T1017] netlink: 'syz.4.7287': attribute type 1 has an invalid length. [ 1005.099232][ T1035] bond3: (slave bond0): Releasing active interface [ 1005.145839][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.230119][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.282846][ T1035] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1005.309269][ T1035] bridge0: port 3(batadv0) entered disabled state [ 1005.316302][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.323698][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.369881][ T1035] bond0 (unregistering): Released all slaves [ 1005.388080][ T1040] tipc: Started in network mode [ 1005.396849][ T1040] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1005.413286][ T1040] tipc: Enabling of bearer rejected, failed to enable media [ 1005.579258][ T1062] __nla_validate_parse: 20 callbacks suppressed [ 1005.579281][ T1062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7297'. [ 1005.818732][T17287] Bluetooth: hci5: link tx timeout [ 1005.824071][T17287] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1006.050690][ T1082] netlink: 'syz.1.7301': attribute type 1 has an invalid length. [ 1006.077093][ T1082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7301'. [ 1006.489417][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7306'. [ 1006.520442][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7306'. [ 1006.868072][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1006.906697][ T1114] netlink: 'syz.4.7312': attribute type 1 has an invalid length. [ 1006.986528][ T1114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.036533][ T1114] tun0: tun_chr_ioctl cmd 1074025675 [ 1007.042211][ T1114] tun0: persist disabled [ 1007.207888][ T1136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1007.307061][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1007.405516][ T1142] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1007.416995][ T1142] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1007.480421][ T1136] macvlan2: entered promiscuous mode [ 1007.493500][ T1136] macvlan2: entered allmulticast mode [ 1007.499576][ T1136] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 1007.525939][ T1155] tunl0: Caught tx_queue_len zero misconfig [ 1007.606064][ T1161] netlink: 'syz.3.7323': attribute type 1 has an invalid length. [ 1007.635964][ T1161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1007.690063][ T1166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7326'. [ 1007.851692][ T1185] netlink: 'syz.2.7329': attribute type 1 has an invalid length. [ 1007.878262][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7328'. [ 1007.890811][T17287] Bluetooth: hci5: command 0x0406 tx timeout [ 1007.906416][ T1185] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1008.293726][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.323726][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.351524][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.370126][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.923567][ T1216] 8021q: VLANs not supported on ip6tnl0 [ 1009.056970][ T1229] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1009.085213][ T13] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1009.128770][ T13] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1009.178688][ T13] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1009.224685][ T13] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1009.414974][ T1246] netlink: 'syz.4.7342': attribute type 1 has an invalid length. [ 1009.447580][ T1246] netlink: 'syz.4.7342': attribute type 7 has an invalid length. [ 1009.486747][ T1246] netlink: 'syz.4.7342': attribute type 8 has an invalid length. [ 1009.779757][ T1259] netlink: 'syz.2.7344': attribute type 1 has an invalid length. [ 1009.974971][ T1265] netlink: 'syz.3.7346': attribute type 10 has an invalid length. [ 1010.001319][ T1213] lo speed is unknown, defaulting to 1000 [ 1010.034710][ T1270] netlink: 'syz.3.7346': attribute type 10 has an invalid length. [ 1010.072970][ T1265] team0: Port device dummy0 added [ 1010.164816][ T1270] team0: Port device dummy0 removed [ 1010.307213][ T1278] netlink: 'syz.2.7349': attribute type 1 has an invalid length. [ 1010.603784][ T5847] Bluetooth: hci0: command 0x040f tx timeout [ 1010.802377][ T1299] netlink: 'syz.4.7357': attribute type 1 has an invalid length. [ 1010.820899][ T1304] __nla_validate_parse: 7 callbacks suppressed [ 1010.820920][ T1304] netlink: 320 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1010.848653][ T1299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7357'. [ 1011.064878][ T1312] syzkaller0: entered promiscuous mode [ 1011.165927][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.187217][ T1320] netlink: 'syz.0.7361': attribute type 1 has an invalid length. [ 1011.268056][ T1320] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1011.493183][ T1331] netlink: zone id is out of range [ 1011.547124][ T1331] netlink: zone id is out of range [ 1011.578309][ T1331] netlink: zone id is out of range [ 1011.604904][ T1331] netlink: zone id is out of range [ 1011.621192][ T1331] netlink: zone id is out of range [ 1011.636149][ T1331] netlink: zone id is out of range [ 1011.667214][ T1331] netlink: zone id is out of range [ 1011.678583][ T1331] netlink: zone id is out of range [ 1011.697331][ T1331] netlink: zone id is out of range [ 1012.923212][ T1367] netlink: 'syz.4.7370': attribute type 1 has an invalid length. [ 1012.993396][ T1367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7370'. [ 1013.294417][ T1390] netlink: 'syz.1.7375': attribute type 12 has an invalid length. [ 1013.329853][ T1385] syzkaller0: entered promiscuous mode [ 1013.357211][ T1385] syzkaller0: entered allmulticast mode [ 1013.367065][ T1394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1013.531739][ T1401] team0: entered allmulticast mode [ 1013.546494][ T1401] team_slave_0: entered allmulticast mode [ 1013.564833][ T1401] team_slave_1: entered allmulticast mode [ 1013.577563][ T1401] dummy0: entered allmulticast mode [ 1013.666233][ T1407] netlink: 212232 bytes leftover after parsing attributes in process `syz.3.7377'. [ 1013.908263][ T1414] netlink: 'syz.0.7379': attribute type 1 has an invalid length. [ 1014.043186][ T1414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1014.164619][ T1413] bond3: (slave veth0_to_bond): making interface the new active one [ 1014.207553][ T1413] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1014.259568][ T1435] netlink: 'syz.4.7384': attribute type 1 has an invalid length. [ 1014.353422][ T1440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1014.494448][ T1444] virt_wifi0: entered promiscuous mode [ 1014.503263][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1014.520263][ T1444] virt_wifi0: entered allmulticast mode [ 1014.530769][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1014.549529][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1014.577052][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1014.944430][ T1469] netlink: 'syz.1.7391': attribute type 1 has an invalid length. [ 1014.988736][ T1470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.010736][ T1469] netlink: 'syz.1.7391': attribute type 7 has an invalid length. [ 1015.035659][ T1469] netlink: 'syz.1.7391': attribute type 8 has an invalid length. [ 1015.710378][ T1504] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 1015.811889][ T1505] rdma_rxe: rxe_newlink: failed to add lo [ 1016.741178][ T1549] __nla_validate_parse: 5 callbacks suppressed [ 1016.741198][ T1549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7408'. [ 1016.890741][ T1564] netlink: 'syz.3.7411': attribute type 9 has an invalid length. [ 1017.028055][ T1578] netlink: 187064 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1017.061498][ T1567] IPv6: sit2: Disabled Multicast RS [ 1017.076049][ T1567] sit2: entered allmulticast mode [ 1017.125005][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1017.142384][ T1576] erspan0: entered promiscuous mode [ 1017.323979][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7417'. [ 1017.345037][ T1589] netlink: 'syz.3.7418': attribute type 1 has an invalid length. [ 1017.380157][ T1589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1017.660988][ T1609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1017.711241][ T1609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1017.741219][ T1609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1017.768231][ T1609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7421'. [ 1017.930276][ T1623] tipc: Enabling of bearer rejected, failed to enable media [ 1018.258946][ T1628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7424'. [ 1018.327106][ T1577] lo speed is unknown, defaulting to 1000 [ 1018.810891][ T1658] net_ratelimit: 337 callbacks suppressed [ 1018.810915][ T1658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1018.928556][ T1663] IPv6: sit1: Disabled Multicast RS [ 1018.956282][ T1663] sit1: entered allmulticast mode [ 1019.256881][ T1683] netlink: 'syz.3.7437': attribute type 1 has an invalid length. [ 1019.880981][ T1579] lo speed is unknown, defaulting to 1000 [ 1021.092954][ T1758] xt_hashlimit: size too large, truncated to 1048576 [ 1021.487346][ T1767] netlink: 'syz.3.7458': attribute type 1 has an invalid length. [ 1021.555429][ T1767] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.141578][ T1794] __nla_validate_parse: 11 callbacks suppressed [ 1022.141599][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7466'. [ 1022.191720][ T1794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7466'. [ 1022.293182][ T1794] geneve2: entered promiscuous mode [ 1022.312884][ T1794] geneve2: entered allmulticast mode [ 1022.506365][ T1812] netlink: 'syz.3.7472': attribute type 1 has an invalid length. [ 1022.547012][ T1812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1022.560907][ T1812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.691272][ T1816] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1022.754344][ T1816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1022.816541][ T1823] openvswitch: netlink: Message has 8 unknown bytes. [ 1022.825061][ T1823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.647550][ T1851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1023.674069][ T1855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 1023.816734][ T29] audit: type=1107 audit(1777090258.093:112): pid=1860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':kވaWq̛֬H lAy苁NdQ|l痷>CJn"{JI5_ƨbm;!߇vm(5YPH 'a} >z' [ 1023.855286][ T1861] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7484'. [ 1023.867518][ T1863] netlink: 'syz.1.7485': attribute type 1 has an invalid length. [ 1023.877724][ T1863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1023.897019][ T1861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7484'. [ 1023.909056][ T1863] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1024.620462][ T1907] netlink: 'syz.4.7499': attribute type 1 has an invalid length. [ 1024.667490][ T1907] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1024.720443][ T1909] xt_CT: No such helper "snmp_trap" [ 1024.864667][ T1921] delete_channel: no stack [ 1024.890132][ T1920] netlink: 'syz.2.7502': attribute type 33 has an invalid length. [ 1024.890712][ T1924] x_tables: duplicate underflow at hook 3 [ 1025.021216][ T1920] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1025.088383][ T1920] bond5 (unregistering): Released all slaves [ 1025.440187][ T1955] syzkaller0: entered promiscuous mode [ 1025.455689][ T1955] syzkaller0: entered allmulticast mode [ 1025.503726][ T1955] 0: reclassify loop, rule prio 0, protocol 800 [ 1025.833216][ T1964] erspan0: entered promiscuous mode [ 1025.911353][ T1969] syzkaller0: entered promiscuous mode [ 1025.922728][ T1969] syzkaller0: entered allmulticast mode [ 1025.938001][ T1973] netlink: 'syz.0.7518': attribute type 25 has an invalid length. [ 1029.367859][ T1992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.384012][ T1973] netlink: 'syz.0.7518': attribute type 25 has an invalid length. [ 1029.393176][ T1973] __nla_validate_parse: 8 callbacks suppressed [ 1029.394411][ T1973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7518'. [ 1029.514934][ T1998] tipc: Started in network mode [ 1029.520079][ T1998] tipc: Node identity bbbbbb, cluster identity 4711 [ 1029.548281][ T1998] tipc: Enabled bearer , priority 10 [ 1029.631330][ T2005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1029.694829][ T2001] syzkaller0: entered promiscuous mode [ 1029.703763][ T2001] syzkaller0: entered allmulticast mode [ 1029.965290][ T2022] syzkaller0: entered promiscuous mode [ 1029.971034][ T2022] syzkaller0: entered allmulticast mode [ 1030.184204][ T2031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7537'. [ 1030.613435][ T2047] syzkaller0: entered promiscuous mode [ 1030.631612][ T2047] syzkaller0: entered allmulticast mode [ 1030.697010][T20863] tipc: Node number set to 3149642496 [ 1030.731267][ T2056] openvswitch: netlink: IP tunnel dst address not specified [ 1030.934798][ T2069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7549'. [ 1030.970504][ T2075] netlink: 'syz.0.7550': attribute type 6 has an invalid length. [ 1030.991272][ T2071] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1031.011468][ T2071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1031.218267][ T2088] xt_hashlimit: size too large, truncated to 1048576 [ 1031.365976][ T2096] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1031.733621][ T2118] netlink: 'syz.1.7565': attribute type 1 has an invalid length. [ 1031.785440][ T2118] bond7: entered promiscuous mode [ 1031.791323][ T2118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1031.814975][ T2124] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7566'. [ 1031.853738][ T2118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1031.889930][ T2118] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 1031.906349][ T2118] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1031.936395][ T2126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7567'. [ 1031.948299][ T2118] bond7: (slave vti0): making interface the new active one [ 1031.958492][ T2118] vti0: entered promiscuous mode [ 1031.976918][ T2118] bond7: (slave vti0): Enslaving as an active interface with an up link [ 1031.998969][ T2126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7567'. [ 1032.557600][ T2154] geneve2: entered promiscuous mode [ 1032.596143][ T7527] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 46098 - 0 [ 1032.624767][ T7527] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 46098 - 0 [ 1032.651610][ T7527] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 46098 - 0 [ 1032.666618][ T2158] netlink: 'syz.1.7578': attribute type 1 has an invalid length. [ 1032.677217][ T7527] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 46098 - 0 [ 1032.721101][ T2166] bridge0: port 1(vlan3) entered blocking state [ 1032.744547][ T2165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7578'. [ 1032.753331][ T2166] bridge0: port 1(vlan3) entered disabled state [ 1032.775744][ T2166] vlan3: entered allmulticast mode [ 1032.787325][ T2166] geneve0: entered allmulticast mode [ 1032.805943][ T2166] vlan3: entered promiscuous mode [ 1032.812658][ T2166] geneve0: entered promiscuous mode [ 1032.878784][ T2158] bond8: entered promiscuous mode [ 1032.884246][ T2158] bond8: entered allmulticast mode [ 1032.889866][ T2158] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1035.594976][ T2172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1035.609932][ T2194] netlink: 'syz.1.7584': attribute type 2 has an invalid length. [ 1035.627119][ T2194] __nla_validate_parse: 4 callbacks suppressed [ 1035.627137][ T2194] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1035.803485][ T2208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1035.840186][ T2211] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1035.855734][ T2214] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7590'. [ 1035.967312][ T2220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1036.029285][ T2220] C: renamed from lo (while UP) [ 1036.058321][ T2220] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1036.148769][ T2235] netlink: 'syz.1.7594': attribute type 1 has an invalid length. [ 1036.189600][ T2234] netlink: 'syz.3.7595': attribute type 1 has an invalid length. [ 1036.205544][ T2239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7594'. [ 1036.220970][ T2235] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1036.378600][ T2253] ip6tnl0: Caught tx_queue_len zero misconfig [ 1036.566858][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1036.824795][ T2274] ip6t_srh: unknown srh match flags 4000 [ 1036.910843][T17287] Bluetooth: hci3: link tx timeout [ 1036.934595][T17287] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.050701][ T5847] Bluetooth: hci3: link tx timeout [ 1037.059235][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.094732][ T5847] Bluetooth: hci3: link tx timeout [ 1037.101496][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.222899][ T5847] Bluetooth: hci3: link tx timeout [ 1037.228108][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1037.630826][ T2299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1037.685740][ T2301] netlink: 'syz.2.7611': attribute type 39 has an invalid length. [ 1038.133274][ T5847] Bluetooth: hci3: link tx timeout [ 1038.138756][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1039.002885][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 1039.010949][ T2223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1039.029163][ T2295] netlink: 'syz.3.7609': attribute type 1 has an invalid length. [ 1039.063166][ T2295] netlink: 'syz.3.7609': attribute type 1 has an invalid length. [ 1039.655168][ T2345] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7622'. [ 1039.779105][ T2355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7625'. [ 1039.795400][ T2348] block nbd6: server does not support multiple connections per device. [ 1039.833083][ T2348] block nbd6: shutting down sockets [ 1039.927570][ T2364] x9: renamed from bridge_slave_0 (while UP) [ 1040.318239][ T2374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1040.678395][ T2395] netlink: 'syz.3.7631': attribute type 1 has an invalid length. [ 1040.682699][ T2392] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1040.721690][ T2392] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1040.847738][ T2402] __nla_validate_parse: 2 callbacks suppressed [ 1040.847770][ T2402] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.7633'. [ 1041.116452][ T2411] netlink: 'syz.4.7635': attribute type 10 has an invalid length. [ 1041.136090][ T2411] batadv0: left allmulticast mode [ 1041.159680][ T2411] batadv0: left promiscuous mode [ 1041.193912][ T2411] bridge0: port 3(batadv0) entered disabled state [ 1041.508875][ T2439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1041.527428][ T2439] bond0: entered promiscuous mode [ 1041.546797][ T2439] bond_slave_0: entered promiscuous mode [ 1041.558690][ T2439] bond_slave_1: entered promiscuous mode [ 1041.576301][ T2442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1041.594741][ T2439] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode [ 1041.612974][ T2442] netlink: 'syz.2.7642': attribute type 33 has an invalid length. [ 1041.618302][ T2446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1041.630128][ T2439] gretap0: entered promiscuous mode [ 1041.632448][ T2439] gretap0: left promiscuous mode [ 1041.644901][ T2439] bond0: left promiscuous mode [ 1041.662291][ T2439] bond_slave_0: left promiscuous mode [ 1041.674903][ T2439] bond_slave_1: left promiscuous mode [ 1041.690837][ T2439] mac80211_hwsim hwsim72 wlan1: left promiscuous mode [ 1041.760841][ T2444] netlink: 'syz.3.7643': attribute type 12 has an invalid length. [ 1041.830188][ T2461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7645'. [ 1041.857886][ T2442] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1041.877323][ T2442] bond5 (unregistering): Released all slaves [ 1042.137255][ T2471] nbd: couldn't find a device at index 0 [ 1043.114543][ T2501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7654'. [ 1043.486134][ T2493] bridge9: entered promiscuous mode [ 1043.510618][ T2493] bridge9: entered allmulticast mode [ 1043.938270][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7661'. [ 1044.004623][ T2543] x_tables: unsorted entry at hook 1 [ 1044.060450][ T2550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7661'. [ 1044.115098][ T2538] bridge_slave_0 (unregistering): left allmulticast mode [ 1044.128868][ T2538] bridge_slave_0 (unregistering): left promiscuous mode [ 1044.138155][ T2538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.780543][ T2595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7673'. [ 1044.793695][ T2597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7674'. [ 1044.824334][ T2595] bridge_slave_1: left allmulticast mode [ 1044.846674][ T2595] bridge_slave_1: left promiscuous mode [ 1044.886208][ T2595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.555376][ T2652] xt_socket: unknown flags 0x8 [ 1046.759094][ T2713] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1046.796046][ T2718] __nla_validate_parse: 4 callbacks suppressed [ 1046.796069][ T2718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1047.059201][ T2718] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1047.119604][ T2718] bond10 (unregistering): Released all slaves [ 1047.170796][ T2732] bond5: entered promiscuous mode [ 1047.731845][ T2782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1047.830290][ T2797] netlink: 'syz.3.7719': attribute type 10 has an invalid length. [ 1047.831679][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1047.855676][ T2797] bridge_slave_1: left allmulticast mode [ 1047.875317][ T2797] bridge_slave_1: left promiscuous mode [ 1047.886508][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.910786][ T2797] vlan3: left promiscuous mode [ 1047.920809][ T2797] geneve0: left promiscuous mode [ 1047.946439][ T2801] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1047.980771][ T2800] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1048.113864][ T48] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1048.298349][ T2823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7721'. [ 1048.299220][ T2824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1048.326138][ T2824] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1048.369440][ T2824] veth7: entered promiscuous mode [ 1048.476654][ T2830] syzkaller0: entered promiscuous mode [ 1048.483144][ T2830] syzkaller0: entered allmulticast mode [ 1048.490033][ T2834] syzkaller0: entered promiscuous mode [ 1048.496897][ T2834] syzkaller0: entered allmulticast mode [ 1049.195210][ T2845] netlink: 'syz.4.7729': attribute type 1 has an invalid length. [ 1049.389092][ T2848] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7729'. [ 1050.963727][ T2803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1052.054919][ T2845] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1052.319753][ T2875] sctp: [Deprecated]: syz.4.7734 (pid 2875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1052.319753][ T2875] Use struct sctp_sack_info instead [ 1052.447796][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1052.453289][ T2881] syzkaller0: entered promiscuous mode [ 1052.485264][ T2881] syzkaller0: entered allmulticast mode [ 1052.524774][ T2880] tipc: Started in network mode [ 1052.548863][ T2880] tipc: Node identity 46b7d49bf3a2, cluster identity 4711 [ 1052.587172][ T2880] tipc: Enabled bearer , priority 0 [ 1052.630944][ T2876] tipc: Resetting bearer [ 1052.775336][ T2876] tipc: Disabling bearer [ 1053.513434][ T2954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1053.867190][ T2968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1053.945878][ T2972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7758'. [ 1054.003011][ T2976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1054.619895][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1054.719678][ T2984] netem: change failed [ 1054.736313][ T2993] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1054.799881][ T2993] syzkaller1: linktype set to 823 [ 1055.205104][ T3023] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1055.291646][ T3032] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7773'. [ 1055.491478][ T3027] syzkaller0: entered promiscuous mode [ 1055.511790][ T3027] syzkaller0: entered allmulticast mode [ 1055.526765][ T3042] veth0_to_bond: entered allmulticast mode [ 1055.633427][ T3049] netlink: 'syz.2.7776': attribute type 15 has an invalid length. [ 1055.645719][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7776'. [ 1055.647620][ T3047] syzkaller0: entered promiscuous mode [ 1055.710411][ T3047] syzkaller0: entered allmulticast mode [ 1055.809355][ T3056] netlink: 'syz.1.7780': attribute type 1 has an invalid length. [ 1055.844288][ T3056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7780'. [ 1056.182075][ T3075] tipc: Enabling of bearer rejected, failed to enable media [ 1056.574506][ T3104] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7791'. [ 1056.576772][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7792'. [ 1056.634636][ T3110] netlink: 'syz.2.7794': attribute type 64 has an invalid length. [ 1056.651720][ T3110] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7794'. [ 1056.669332][ T3108] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1056.700865][ T3115] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1056.708758][ T3108] bond7 (unregistering): Released all slaves [ 1056.714211][ T3117] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1057.435147][ T3151] syzkaller0: entered promiscuous mode [ 1057.452258][ T3151] syzkaller0: entered allmulticast mode [ 1058.123023][ T24] IPVS: starting estimator thread 0... [ 1058.200062][ T3198] __nla_validate_parse: 4 callbacks suppressed [ 1058.200085][ T3198] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1058.220189][ T3202] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1058.230145][ T3195] IPVS: using max 24 ests per chain, 57600 per kthread [ 1058.260416][ T3198] netlink: 'syz.4.7814': attribute type 1 has an invalid length. [ 1058.291506][ T3198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1058.631545][ T3231] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1058.679764][ T3231] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1058.726354][ T3234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.019416][ T3247] netlink: 'syz.2.7827': attribute type 7 has an invalid length. [ 1059.344861][ T3259] netlink: 'syz.2.7830': attribute type 1 has an invalid length. [ 1059.667127][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7835'. [ 1059.713471][ T3274] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1059.943299][ T3290] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7840'. [ 1060.014106][ T3296] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7842'. [ 1060.290763][ T3307] geneve3: entered promiscuous mode [ 1060.312405][ T3307] geneve3: entered allmulticast mode [ 1060.325425][ T3319] netlink: 'syz.0.7850': attribute type 1 has an invalid length. [ 1060.333502][T21697] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.333568][T21697] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.333614][T21697] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.333650][T21697] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.350358][ T3311] veth1_to_hsr: mtu less than device minimum [ 1060.379680][ T3319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1060.459508][ T3311] syzkaller0: entered allmulticast mode [ 1060.494161][ T3323] openvswitch: netlink: Key type 30 is not supported [ 1060.505746][ T3311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1060.538346][ T3323] No such timeout policy "syz1" [ 1060.549340][ T3326] netlink: 'syz.3.7853': attribute type 1 has an invalid length. [ 1060.567692][ T3327] netlink: 'syz.3.7853': attribute type 1 has an invalid length. [ 1060.595140][ T3330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7854'. [ 1060.690682][ T3327] bond9: entered promiscuous mode [ 1060.708605][ T3327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1061.169583][ T3363] syzkaller1: entered promiscuous mode [ 1061.183610][ T3363] syzkaller1: entered allmulticast mode [ 1062.049634][ T3403] tipc: Started in network mode [ 1062.066310][ T3403] tipc: Node identity b2bcad6b30a2, cluster identity 4711 [ 1062.097333][ T3403] tipc: Enabled bearer , priority 0 [ 1062.116423][ T3408] syzkaller0: entered promiscuous mode [ 1062.135432][ T3408] syzkaller0: entered allmulticast mode [ 1062.183637][ T3412] netlink: 'syz.3.7873': attribute type 1 has an invalid length. [ 1062.496803][ T3400] tipc: Resetting bearer [ 1062.591214][ T3400] tipc: Disabling bearer [ 1062.863449][ T3456] openvswitch: netlink: Key type 251 is out of range max 32 [ 1062.898527][ T3457] openvswitch: netlink: Flow actions attr not present in new flow. [ 1062.985656][ T3457] bond0: entered promiscuous mode [ 1063.003771][ T3457] geneve2: entered promiscuous mode [ 1063.041105][ T3457] gretap0: entered promiscuous mode [ 1063.079108][ T3457] debugfs: 'hsr1' already exists in 'hsr' [ 1063.101843][ T3457] Cannot create hsr debugfs directory [ 1063.135131][ T3457] hsr1: entered promiscuous mode [ 1063.368019][ T3480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1063.386232][ T3484] __nla_validate_parse: 11 callbacks suppressed [ 1063.386256][ T3484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1063.594865][ T3496] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1063.833055][ T3483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1064.135202][ T3518] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1064.146142][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.156468][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.157224][ T3520] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.201398][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.375892][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.397611][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.515513][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.538697][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.634801][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.664955][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.689369][ T3529] netlink: 'syz.0.7900': attribute type 25 has an invalid length. [ 1064.805337][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.811336][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7901'. [ 1064.838809][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1064.925826][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1064.941757][ T3521] netlink: 'syz.2.7896': attribute type 30 has an invalid length. [ 1065.066644][ T3551] netlink: 'syz.4.7904': attribute type 1 has an invalid length. [ 1065.169209][ T3551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1065.246240][ T3546] bond7: (slave gretap1): making interface the new active one [ 1065.277139][ T3546] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1065.736714][ T3594] syzkaller0: entered promiscuous mode [ 1065.743054][ T3594] syzkaller0: entered allmulticast mode [ 1065.940134][ T3604] vcan0 (unregistering): left allmulticast mode [ 1066.221759][ T3620] hsr_slave_1 (unregistering): left promiscuous mode [ 1066.460594][ T3639] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1066.498378][ T3639] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1066.609104][ T3643] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1066.618749][ T3643] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1066.720611][ T3641] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1066.738399][ T3646] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1066.789927][ T3652] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1066.797390][ T3652] bridge0: port 3(dummy0) entered disabled state [ 1066.804001][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.811394][ T3652] bridge0: port 1(1x9) entered disabled state [ 1067.338527][ T3683] netlink: 'syz.1.7944': attribute type 11 has an invalid length. [ 1067.383996][ T3686] macvlan0: entered promiscuous mode [ 1067.569153][ T3693] bridge_slave_0: left allmulticast mode [ 1067.599582][ T3693] bridge_slave_0: left promiscuous mode [ 1067.620034][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.680720][ T3693] bridge_slave_1: left allmulticast mode [ 1067.712408][ T3693] bridge_slave_1: left promiscuous mode [ 1067.735620][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.810428][ T3693] bond0: (slave bond_slave_0): Releasing backup interface [ 1067.870643][ T3693] bond0: (slave bond_slave_1): Releasing backup interface [ 1067.929013][ T3693] team0: Port device team_slave_0 removed [ 1067.948560][ T3693] team0: Port device team_slave_1 removed [ 1067.959451][ T3693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.084358][ T3718] bridge0: port 1(gretap0) entered blocking state [ 1068.096690][ T3718] bridge0: port 1(gretap0) entered disabled state [ 1068.105954][ T3718] gretap0: entered allmulticast mode [ 1068.119764][ T3718] gretap0: entered promiscuous mode [ 1068.195497][ T3719] syzkaller1: entered promiscuous mode [ 1068.201730][ T3719] syzkaller1: entered allmulticast mode [ 1068.545382][ T3742] netlink: 'syz.0.7963': attribute type 1 has an invalid length. [ 1068.609574][ T3742] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1068.737362][ T3748] bond6: (slave geneve3): making interface the new active one [ 1068.779942][ T3759] netlink: 'syz.1.7968': attribute type 6 has an invalid length. [ 1068.798020][ T3748] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1068.896889][ T3759] __nla_validate_parse: 15 callbacks suppressed [ 1068.896913][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7968'. [ 1069.058034][ T3769] xt_hashlimit: size too large, truncated to 1048576 [ 1069.135481][ T3774] ip6tnl3: entered allmulticast mode [ 1069.359695][ T3790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7977'. [ 1069.561164][ T3797] netlink: 'syz.1.7980': attribute type 12 has an invalid length. [ 1069.562239][ T3798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7979'. [ 1069.586283][ T3797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1069.668870][ T3805] openvswitch: netlink: Multiple metadata blocks provided [ 1069.698730][ T3807] SET target dimension over the limit! [ 1069.874418][ T3816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7984'. [ 1069.956860][ T3818] netlink: 'syz.3.7987': attribute type 1 has an invalid length. [ 1070.084692][ T3818] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1070.404246][ T3847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.440739][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7995'. [ 1070.460674][ T3850] netlink: 'syz.4.7996': attribute type 4 has an invalid length. [ 1070.898990][ T3864] SET target dimension over the limit! [ 1071.107501][ T3873] openvswitch: netlink: IP tunnel dst address not specified [ 1071.426091][ T3885] netlink: 'syz.1.8004': attribute type 39 has an invalid length. [ 1071.479380][ T3894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1071.547315][ T3899] netlink: 'syz.4.8008': attribute type 1 has an invalid length. [ 1071.576363][ T3899] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1071.725718][ T3913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1071.971284][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1072.005771][ T3922] netlink: 'syz.1.8014': attribute type 64 has an invalid length. [ 1072.112949][ T3927] bond11: entered allmulticast mode [ 1072.140836][ T3927] bridge11: entered promiscuous mode [ 1072.148875][ T3927] bridge11: entered allmulticast mode [ 1072.166702][ T3927] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 1072.579778][ T3958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8023'. [ 1072.654364][ T3944] IPVS: persistence engine module ip_vs_pe_@ not found [ 1072.668666][ T3965] netlink: 'syz.4.8024': attribute type 1 has an invalid length. [ 1072.752551][ T3958] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8023'. [ 1072.766893][ T3965] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1073.016037][ T3978] netlink: 'syz.0.8028': attribute type 1 has an invalid length. [ 1073.058345][ T3976] syzkaller0: entered promiscuous mode [ 1073.094223][ T3976] syzkaller0: entered allmulticast mode [ 1073.216501][ T3978] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1073.529969][ T4018] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1073.906300][ T3989] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1074.114132][ T4000] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1074.183822][ T4004] bond5: (slave veth0_to_bond): Releasing active interface [ 1074.238002][ T4004] bond10: (slave veth0_to_bond): making interface the new active one [ 1074.254517][ T4004] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1074.317656][ T4009] bond10: entered promiscuous mode [ 1074.337434][ T4009] veth0_to_bond: entered promiscuous mode [ 1074.359095][ T4009] bond10: entered allmulticast mode [ 1074.376916][ T4009] veth0_to_bond: entered allmulticast mode [ 1074.410953][ T4014] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1074.560944][ T4051] __nla_validate_parse: 7 callbacks suppressed [ 1074.560967][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1075.083740][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1075.335257][ T4079] syzkaller1: entered promiscuous mode [ 1075.368716][ T4079] syzkaller1: entered allmulticast mode [ 1075.679156][ T4081] syzkaller0: entered promiscuous mode [ 1075.703809][ T4081] syzkaller0: entered allmulticast mode [ 1075.849342][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8051'. [ 1079.774955][ T4130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8057'. [ 1079.827198][ T4132] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1079.837287][ T4129] team0: Port device gretap1 added [ 1079.973574][ T4141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1079.983359][ T4141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1079.993481][ T4141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1080.003725][ T4124] validate_nla: 1 callbacks suppressed [ 1080.003745][ T4124] netlink: 'syz.0.8057': attribute type 61 has an invalid length. [ 1080.195063][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1080.215105][ T4150] netlink: 187468 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1080.319946][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8066'. [ 1080.756563][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8074'. [ 1080.931090][ T4184] netlink: 'syz.1.8077': attribute type 1 has an invalid length. [ 1080.942956][ T4184] netlink: 'syz.1.8077': attribute type 1 has an invalid length. [ 1080.975437][ T4187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8078'. [ 1081.000016][ T4187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8078'. [ 1081.022742][ T4187] netlink: 'syz.4.8078': attribute type 5 has an invalid length. [ 1081.303777][ T4191] bridge8: entered promiscuous mode [ 1081.335474][ T4191] bridge8: entered allmulticast mode [ 1081.496017][ T4210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1081.517659][ T4213] netlink: 'syz.4.8085': attribute type 4 has an invalid length. [ 1082.904936][ T4273] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1082.916246][ T4281] sctp: [Deprecated]: syz.2.8100 (pid 4281) Use of int in max_burst socket option. [ 1082.916246][ T4281] Use struct sctp_assoc_value instead [ 1083.295303][ T4296] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1083.311545][ T4298] xt_hashlimit: size too large, truncated to 1048576 [ 1083.318717][ T4288] bridge9: entered promiscuous mode [ 1083.358694][ T4288] bridge9: entered allmulticast mode [ 1084.790072][ T4375] netlink: 'syz.2.8119': attribute type 11 has an invalid length. [ 1084.823076][ T4375] __nla_validate_parse: 72 callbacks suppressed [ 1084.823099][ T4375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8119'. [ 1084.966596][ T4382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8122'. [ 1085.267636][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8124'. [ 1085.287166][ T4397] bridge_slave_1: default FDB implementation only supports local addresses [ 1085.287866][ T4404] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1085.344094][ T4403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.351507][ T4403] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.413792][ T4409] IPVS: sync thread started: state = BACKUP, mcast_ifn = pimreg, syncid = 3, id = 0 [ 1085.457766][ T4397] lo: left promiscuous mode [ 1085.480906][ T4397] lo: entered allmulticast mode [ 1085.523149][ T4397] tunl0: entered allmulticast mode [ 1085.593111][ T4397] gre0: entered allmulticast mode [ 1085.640929][ T4397] gretap0: entered allmulticast mode [ 1085.780219][ T4397] erspan0: entered allmulticast mode [ 1085.808154][ T12] tipc: Subscription rejected, illegal request [ 1085.833805][ T4397] ip_vti0: entered allmulticast mode [ 1085.861853][ T4397] ip6_vti0: entered allmulticast mode [ 1085.891793][ T4397] sit0: entered allmulticast mode [ 1085.924556][ T4397] ip6tnl0: entered allmulticast mode [ 1085.975500][ T4397] ip6gre0: entered allmulticast mode [ 1085.998848][ T4397] syz_tun: entered allmulticast mode [ 1086.037821][ T4397] ip6gretap0: entered allmulticast mode [ 1086.063462][ T4397] bridge0: entered allmulticast mode [ 1086.075170][ T4397] team0: entered allmulticast mode [ 1086.083958][ T4397] team_slave_0: entered allmulticast mode [ 1086.089808][ T4397] team_slave_1: entered allmulticast mode [ 1086.103069][ T4397] dummy0: entered allmulticast mode [ 1086.116959][ T4397] nlmon0: entered allmulticast mode [ 1086.126731][ T4397] caif0: entered allmulticast mode [ 1086.139459][ T4397] vxcan0: entered allmulticast mode [ 1086.150462][ T4397] vxcan1: entered allmulticast mode [ 1086.159727][ T4397] veth0: entered allmulticast mode [ 1086.174173][ T4397] veth1: entered allmulticast mode [ 1086.195194][ T4397] wg0: entered allmulticast mode [ 1086.209219][ T4397] wg1: entered allmulticast mode [ 1086.229316][ T4397] wg2: entered allmulticast mode [ 1086.249434][ T4397] veth1_to_bridge: entered allmulticast mode [ 1086.263185][ T4397] bridge_slave_1: entered allmulticast mode [ 1086.278011][ T4397] bond_slave_0: entered allmulticast mode [ 1086.285998][ T4397] veth1_to_bond: entered allmulticast mode [ 1086.298907][ T4397] bond_slave_1: entered allmulticast mode [ 1086.308866][ T4397] veth0_to_team: entered allmulticast mode [ 1086.334097][ T4397] veth1_to_team: entered allmulticast mode [ 1086.353787][ T4397] veth0_to_batadv: entered allmulticast mode [ 1086.364916][ T4397] batadv_slave_0: entered allmulticast mode [ 1086.375657][ T4397] veth1_to_batadv: entered allmulticast mode [ 1086.431363][ T4397] xfrm0: entered allmulticast mode [ 1086.453302][ T4397] veth0_to_hsr: entered allmulticast mode [ 1086.476184][ T4397] hsr_slave_0: entered allmulticast mode [ 1086.496071][ T4397] veth1_to_hsr: entered allmulticast mode [ 1086.514243][ T4397] hsr_slave_1: entered allmulticast mode [ 1086.535485][ T4397] hsr0: entered allmulticast mode [ 1086.553278][ T4397] veth1_virt_wifi: entered allmulticast mode [ 1086.571008][ T4397] veth0_virt_wifi: entered allmulticast mode [ 1086.595305][ T4397] virt_wifi0: entered allmulticast mode [ 1086.601147][ T4397] veth1_vlan: entered allmulticast mode [ 1086.628294][ T4397] veth0_vlan: entered allmulticast mode [ 1086.676732][ T4397] vlan0: entered allmulticast mode [ 1086.693510][ T4397] vlan1: entered allmulticast mode [ 1086.701081][ T4397] macvlan0: entered allmulticast mode [ 1086.717488][ T4397] macvlan1: entered allmulticast mode [ 1086.731171][ T4397] ipvlan0: entered allmulticast mode [ 1086.749058][ T4397] ipvlan1: entered allmulticast mode [ 1086.755334][ T4397] veth1_macvtap: entered allmulticast mode [ 1086.767401][ T4397] veth0_macvtap: entered allmulticast mode [ 1086.789180][ T4397] macvtap0: entered allmulticast mode [ 1086.807655][ T4397] macsec0: entered allmulticast mode [ 1086.846101][ T4397] geneve1: entered allmulticast mode [ 1086.864111][ T4397] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1086.873957][ T4397] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 1086.900615][ T4397] ip6tnl1: entered allmulticast mode [ 1086.918968][ T4397] bridge1: entered allmulticast mode [ 1086.927778][ T4397] bond0: entered allmulticast mode [ 1086.937533][ T4397] geneve2: entered allmulticast mode [ 1086.963869][ T4397] syztnl2: entered allmulticast mode [ 1086.973474][ T4397] netdevsim netdevsim3 eth0: entered allmulticast mode [ 1086.980455][ T4397] netdevsim netdevsim3 eth1: entered allmulticast mode [ 1086.987723][ T4397] netdevsim netdevsim3 eth2: entered allmulticast mode [ 1086.996188][ T4397] netdevsim netdevsim3 eth3: entered allmulticast mode [ 1087.004439][ T4397] macsec1: entered allmulticast mode [ 1087.010308][ T4397] bridge2: left promiscuous mode [ 1087.020624][ T4397] gtp0: entered allmulticast mode [ 1087.031850][ T4397] bond2: entered allmulticast mode [ 1087.044496][ T4397] bridge3: entered allmulticast mode [ 1087.054717][ T4397] bond3: entered allmulticast mode [ 1087.065062][ T4397] gtp1: entered allmulticast mode [ 1087.070588][ T4397] bond4: left promiscuous mode [ 1087.075899][ T4397] ip6gre1: left promiscuous mode [ 1087.080960][ T4397] bond4: entered allmulticast mode [ 1087.087025][ T4397] ip6gre1: entered allmulticast mode [ 1087.109560][ T4397] ip6erspan0: entered allmulticast mode [ 1087.125494][ T4397] bond6: entered allmulticast mode [ 1087.135060][ T4397] bridge4: entered allmulticast mode [ 1087.143401][ T4397] bond7: entered allmulticast mode [ 1087.151825][ T4397] gretap1: entered allmulticast mode [ 1087.158073][ T4397] bridge5: entered allmulticast mode [ 1087.167180][ T4397] bridge6: entered allmulticast mode [ 1087.181571][ T4397] bridge7: entered allmulticast mode [ 1087.190304][ T4397] ip6gre2: entered allmulticast mode [ 1087.203131][ T4397] bridge8: entered allmulticast mode [ 1087.212753][ T4397] bridge9: left promiscuous mode [ 1087.225855][ T4397] bond8: entered allmulticast mode [ 1087.236448][ T4397] geneve3: left promiscuous mode [ 1087.248175][ T4397] bond9: left promiscuous mode [ 1087.258543][ T4397] bond9: entered allmulticast mode [ 1087.268940][ T4397] vlan4: entered allmulticast mode [ 1087.275211][ T4397] hsr1: left promiscuous mode [ 1087.279918][ T4397] hsr1: entered allmulticast mode [ 1087.290474][ T4397] bridge10: entered allmulticast mode [ 1087.300932][ T4397] bond10: entered allmulticast mode [ 1087.309160][ T4397] bridge11: left promiscuous mode [ 1087.326985][ T4426] netlink: 'syz.4.8130': attribute type 4 has an invalid length. [ 1087.359888][ T4430] netlink: 'syz.4.8130': attribute type 4 has an invalid length. [ 1087.424698][ T3367] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.468922][ T3367] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1087.516220][ T3367] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.557335][ T3367] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1087.593459][ T3367] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.619785][ T3367] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1087.674867][ T3367] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.698676][ T3367] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1087.981053][ T4474] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1088.150975][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8142'. [ 1088.210375][ T4480] can: request_module (can-proto-0) failed. [ 1088.671533][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'. [ 1089.523856][ T4562] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1089.930477][ T4590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8169'. [ 1089.968003][ T4588] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1090.135179][ T4555] netlink: 'syz.2.8162': attribute type 16 has an invalid length. [ 1090.151297][ T4555] netlink: 'syz.2.8162': attribute type 17 has an invalid length. [ 1090.204989][ T4555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.226829][ T4555] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1090.284246][ T4555] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1090.340074][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1090.529161][ T4615] vlan1: entered allmulticast mode [ 1090.566332][ T4615] bridge5: entered allmulticast mode [ 1090.605672][ T4604] bridge5: port 1(erspan0) entered blocking state [ 1090.624090][ T4604] bridge5: port 1(erspan0) entered disabled state [ 1090.658437][ T4604] erspan0: entered allmulticast mode [ 1090.695512][ T4604] erspan0: entered promiscuous mode [ 1090.717871][ T4604] bridge5: port 1(erspan0) entered blocking state [ 1090.724558][ T4604] bridge5: port 1(erspan0) entered forwarding state [ 1090.792267][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8175'. [ 1090.868083][ T4628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8176'. [ 1090.958190][ T4636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8179'. [ 1091.099221][ T4630] nbd6: detected capacity change from 0 to 63 [ 1091.137562][ T4643] ipvlan2: entered allmulticast mode [ 1091.149587][ T5847] block nbd6: Receive control failed (result -32) [ 1091.159017][T17287] block nbd6: Receive control failed (result -32) [ 1091.171708][ T4643] batadv_slave_1: entered allmulticast mode [ 1091.202622][ T4644] block nbd6: Dead connection, failed to find a fallback [ 1091.215934][ T4644] block nbd6: shutting down sockets [ 1091.236113][ T4643] batman_adv: batadv0: Adding interface: ipvlan2 [ 1091.250816][ T4644] blk_print_req_error: 138 callbacks suppressed [ 1091.250838][ T4644] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.269612][ T4643] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.302763][ T4644] buffer_io_error: 138 callbacks suppressed [ 1091.302785][ T4644] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1091.341541][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.344951][ T4644] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.378332][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.383969][ T4644] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1091.411627][ T4643] batman_adv: batadv0: Interface activated: ipvlan2 [ 1091.413006][ T4644] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.471097][ T4644] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1091.512208][ T4644] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.568340][ T4644] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1091.606360][ T4644] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.640688][ T4644] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1091.670718][ T4663] netlink: 'syz.4.8185': attribute type 83 has an invalid length. [ 1091.694844][ T4644] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.747137][ T4644] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1091.793137][ T4644] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.821465][ T4644] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1091.849565][ T4644] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.869944][ T4644] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1091.890361][ T4644] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.907752][ T4644] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1091.937668][ T4644] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1091.959124][ T4644] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1091.989382][ T4644] ldm_validate_partition_table(): Disk read failed. [ 1092.024883][ T4644] Dev nbd6: unable to read RDB block 0 [ 1092.054249][ T4644] nbd6: unable to read partition table [ 1092.155827][ T4644] ldm_validate_partition_table(): Disk read failed. [ 1092.198384][ T4644] Dev nbd6: unable to read RDB block 0 [ 1092.224629][ T4644] nbd6: unable to read partition table [ 1092.467478][ T4685] bridge10: entered promiscuous mode [ 1092.525016][ T4685] bridge10: entered allmulticast mode [ 1092.836827][ T4716] [ 1092.839230][ T4716] ====================================================== [ 1092.846269][ T4716] WARNING: possible circular locking dependency detected [ 1092.853314][ T4716] syzkaller #0 Not tainted [ 1092.857755][ T4716] ------------------------------------------------------ [ 1092.864794][ T4716] syz.2.8195/4716 is trying to acquire lock: [ 1092.870799][ T4716] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1092.880338][ T4716] [ 1092.880338][ T4716] but task is already holding lock: [ 1092.887727][ T4716] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1092.897355][ T4716] [ 1092.897355][ T4716] which lock already depends on the new lock. [ 1092.897355][ T4716] [ 1092.907777][ T4716] [ 1092.907777][ T4716] the existing dependency chain (in reverse order) is: [ 1092.916792][ T4716] [ 1092.916792][ T4716] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 1092.924699][ T4716] _raw_spin_lock_bh+0x36/0x50 [ 1092.929985][ T4716] nr_rt_ioctl+0x40c/0xf90 [ 1092.934940][ T4716] sock_do_ioctl+0x101/0x320 [ 1092.940053][ T4716] sock_ioctl+0x5c6/0x7f0 [ 1092.944901][ T4716] __se_sys_ioctl+0xfc/0x170 [ 1092.950023][ T4716] do_syscall_64+0x15f/0xf80 [ 1092.955150][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.961558][ T4716] [ 1092.961558][ T4716] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 1092.969542][ T4716] _raw_spin_lock_bh+0x36/0x50 [ 1092.974827][ T4716] nr_rt_ioctl+0x215/0xf90 [ 1092.979759][ T4716] sock_do_ioctl+0x101/0x320 [ 1092.984867][ T4716] sock_ioctl+0x5c6/0x7f0 [ 1092.989714][ T4716] __se_sys_ioctl+0xfc/0x170 [ 1092.994827][ T4716] do_syscall_64+0x15f/0xf80 [ 1092.999940][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.006353][ T4716] [ 1093.006353][ T4716] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 1093.014189][ T4716] __lock_acquire+0x15a5/0x2cf0 [ 1093.019559][ T4716] lock_acquire+0x106/0x350 [ 1093.024587][ T4716] _raw_spin_lock_bh+0x36/0x50 [ 1093.029876][ T4716] nr_rt_device_down+0xbe/0x860 [ 1093.035265][ T4716] nr_device_event+0x137/0x150 [ 1093.040550][ T4716] notifier_call_chain+0x1ad/0x3d0 [ 1093.046179][ T4716] netif_close_many+0x2ae/0x420 [ 1093.051553][ T4716] netif_close+0x160/0x220 [ 1093.056497][ T4716] dev_close+0x10a/0x220 [ 1093.061262][ T4716] bpq_device_event+0x377/0x6a0 [ 1093.066634][ T4716] notifier_call_chain+0x1ad/0x3d0 [ 1093.072263][ T4716] __dev_notify_flags+0x16d/0x310 [ 1093.077806][ T4716] netif_change_flags+0xe8/0x1a0 [ 1093.083268][ T4716] dev_change_flags+0x130/0x270 [ 1093.088649][ T4716] dev_ioctl+0x7b4/0x1150 [ 1093.093502][ T4716] sock_do_ioctl+0x23e/0x320 [ 1093.098639][ T4716] sock_ioctl+0x5c6/0x7f0 [ 1093.103489][ T4716] __se_sys_ioctl+0xfc/0x170 [ 1093.108599][ T4716] do_syscall_64+0x15f/0xf80 [ 1093.113714][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.120150][ T4716] [ 1093.120150][ T4716] other info that might help us debug this: [ 1093.120150][ T4716] [ 1093.130377][ T4716] Chain exists of: [ 1093.130377][ T4716] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1093.130377][ T4716] [ 1093.144207][ T4716] Possible unsafe locking scenario: [ 1093.144207][ T4716] [ 1093.151663][ T4716] CPU0 CPU1 [ 1093.157029][ T4716] ---- ---- [ 1093.162393][ T4716] lock(nr_neigh_list_lock); [ 1093.167069][ T4716] lock(&nr_node->node_lock); [ 1093.174359][ T4716] lock(nr_neigh_list_lock); [ 1093.181546][ T4716] lock(nr_node_list_lock); [ 1093.186128][ T4716] [ 1093.186128][ T4716] *** DEADLOCK *** [ 1093.186128][ T4716] [ 1093.194268][ T4716] 2 locks held by syz.2.8195/4716: [ 1093.199370][ T4716] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1093.208197][ T4716] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1093.218209][ T4716] [ 1093.218209][ T4716] stack backtrace: [ 1093.224092][ T4716] CPU: 1 UID: 0 PID: 4716 Comm: syz.2.8195 Not tainted syzkaller #0 PREEMPT(full) [ 1093.224109][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.224117][ T4716] Call Trace: [ 1093.224125][ T4716] [ 1093.224131][ T4716] dump_stack_lvl+0xe8/0x150 [ 1093.224153][ T4716] print_circular_bug+0x2e1/0x300 [ 1093.224169][ T4716] check_noncircular+0x12e/0x150 [ 1093.224184][ T4716] __lock_acquire+0x15a5/0x2cf0 [ 1093.224206][ T4716] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.224223][ T4716] ? dsa_user_netdevice_event+0x495/0x2850 [ 1093.224239][ T4716] ? packet_notifier+0x121/0xf70 [ 1093.224258][ T4716] ? nr_rt_device_down+0xbe/0x860 [ 1093.224269][ T4716] lock_acquire+0x106/0x350 [ 1093.224286][ T4716] ? nr_rt_device_down+0xbe/0x860 [ 1093.224298][ T4716] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1093.224314][ T4716] ? nr_rt_device_down+0xbe/0x860 [ 1093.224324][ T4716] _raw_spin_lock_bh+0x36/0x50 [ 1093.224340][ T4716] ? nr_rt_device_down+0xbe/0x860 [ 1093.224351][ T4716] nr_rt_device_down+0xbe/0x860 [ 1093.224362][ T4716] ? nr_device_event+0x12f/0x150 [ 1093.224382][ T4716] nr_device_event+0x137/0x150 [ 1093.224400][ T4716] notifier_call_chain+0x1ad/0x3d0 [ 1093.224416][ T4716] netif_close_many+0x2ae/0x420 [ 1093.224435][ T4716] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1093.224452][ T4716] ? __pfx_netif_close_many+0x10/0x10 [ 1093.224468][ T4716] ? bond_netdev_event+0x231/0xfa0 [ 1093.224485][ T4716] ? __neigh_ifdown+0x7fd/0x8c0 [ 1093.224502][ T4716] netif_close+0x160/0x220 [ 1093.224519][ T4716] ? __pfx_netif_close+0x10/0x10 [ 1093.224535][ T4716] ? __asan_memset+0x22/0x50 [ 1093.224547][ T4716] ? macvtap_device_event+0xd1/0x400 [ 1093.224568][ T4716] dev_close+0x10a/0x220 [ 1093.224589][ T4716] bpq_device_event+0x377/0x6a0 [ 1093.224616][ T4716] notifier_call_chain+0x1ad/0x3d0 [ 1093.224635][ T4716] __dev_notify_flags+0x16d/0x310 [ 1093.224648][ T4716] ? __pfx___dev_notify_flags+0x10/0x10 [ 1093.224660][ T4716] ? __dev_change_flags+0x5a0/0x7e0 [ 1093.224673][ T4716] ? __pfx___dev_change_flags+0x10/0x10 [ 1093.224686][ T4716] ? full_name_hash+0x92/0xe0 [ 1093.224699][ T4716] netif_change_flags+0xe8/0x1a0 [ 1093.224712][ T4716] dev_change_flags+0x130/0x270 [ 1093.224725][ T4716] dev_ioctl+0x7b4/0x1150 [ 1093.224743][ T4716] sock_do_ioctl+0x23e/0x320 [ 1093.224759][ T4716] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1093.224774][ T4716] ? do_futex+0x333/0x420 [ 1093.224789][ T4716] sock_ioctl+0x5c6/0x7f0 [ 1093.224805][ T4716] ? __pfx_sock_ioctl+0x10/0x10 [ 1093.224823][ T4716] ? __fget_files+0x2a/0x420 [ 1093.224836][ T4716] ? __fget_files+0x3a0/0x420 [ 1093.224848][ T4716] ? __fget_files+0x2a/0x420 [ 1093.224861][ T4716] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1093.224877][ T4716] ? __pfx_sock_ioctl+0x10/0x10 [ 1093.224892][ T4716] __se_sys_ioctl+0xfc/0x170 [ 1093.224907][ T4716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.224920][ T4716] do_syscall_64+0x15f/0xf80 [ 1093.224937][ T4716] ? trace_irq_disable+0x3b/0x140 [ 1093.224953][ T4716] ? clear_bhb_loop+0x40/0x90 [ 1093.224966][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.224979][ T4716] RIP: 0033:0x7f8e9d19cdd9 [ 1093.224992][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.225011][ T4716] RSP: 002b:00007f8e9e055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.225026][ T4716] RAX: ffffffffffffffda RBX: 00007f8e9d415fa0 RCX: 00007f8e9d19cdd9 [ 1093.225036][ T4716] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 1093.225045][ T4716] RBP: 00007f8e9d232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1093.225053][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.225061][ T4716] R13: 00007f8e9d416038 R14: 00007f8e9d415fa0 R15: 00007fff9c03c068 [ 1093.225075][ T4716] [ 1095.411773][ T4694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1100.610259][T17287] Bluetooth: hci3: link tx timeout [ 1100.615629][T17287] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1102.683380][ T5847] Bluetooth: hci3: command 0x0406 tx timeout